setup-sam icon indicating copy to clipboard operation
setup-sam copied to clipboard

Dependabot cannot tell me to update

Open per-oestergaard opened this issue 7 months ago • 0 comments

Dependabot is great at keeping things up to date.

However, as this action specifies SAM CLI's version as an argument like

      - uses: aws-actions/setup-sam@v2
        with:
          version: 1.120.0

dependabot is not able to tell me to update the SAM CLI version.

The solution? One could be to (auto) update the action whenever SAM CLI is updated. A better could be to have dependabot discover this version and suggest an update (https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem).

per-oestergaard avatar Jul 08 '24 14:07 per-oestergaard