cli icon indicating copy to clipboard operation
cli copied to clipboard

Feature request: use config from dependabot.yml

Open timstibbs-hippo opened this issue 1 year ago • 1 comments

Use case: my dependabot.yml config isn't doing quite what I expected, so I'd love to be able to run that locally against my local branch to test out the effect of different config options.

I suspect that the job.yaml file can do everything that you can do in dependabot.yml, however the two are different. This prevents you using this CLI to build your dependabot.yml file. If we could support fetching config from dependabot.yml, then you'd be able to use the same file both locally and on github.

To illustrate this, I'm imagining running the following command:

dependabot update <ecosystem> dummy/repo --local . --config .github/dependabot.yml

Even better if it could pick up that file automatically, but I realise this might be challenging from a backwards compatibility perspective.

Note that I don't have a good understanding of the differences of the capabilities of job.yaml vs dependabot.yml, so this suggestion might essentially be impossible.

Note also that this is related to, but not the same as: #59. Would also potentially satisfy https://github.com/dependabot/dependabot-core/issues/4605.

timstibbs-hippo avatar Feb 15 '24 16:02 timstibbs-hippo

Agree👍 From what I understand, the dependabot.yaml file is converted in runtime into a job.yaml-like layout under the hood by GitHub's dependabot. Therefore, why can't we just use dependabot.yaml everywhere, as it has good official documentation, unlike job.yaml?

denisstrelnikov avatar Mar 20 '24 11:03 denisstrelnikov