dependabot-script

dependabot-script copied to clipboard

Install dependencies fails when building with docker

3

I am following the steps for running the script with a docker. When I run the step 2 "Install dependencies", by executing the following command from the `dependabot-script` project root:...

juho-anz

The script is able to identify most packages but misses some. Not sure where it looks for the packages in `packages.config` or `.csproj` file.

mii9000

Add support for dependabot.yml config file

1

This issue is related to #403 and #429, and was created to reference the new config file according [the new syntax](https://docs.github.com/en/github/administering-a-repository/customizing-dependency-updates)...

gperdomor

.dependabot/config.yml ignored

5

We have a private gitlab installation and I have configured the dependabot-script and schedules for some of the repos. One of the repo has a `.dependabot/config.yml` in the root and...

mohitmutha

As you can see in https://github.com/dependabot/dependabot-script/issues/403 and https://github.com/dependabot/dependabot-core/issues/399#issuecomment-585412909 people are asking for `config.yml` in this script

vv12131415

Use SSH access to allow updating private repository dependencies

8

Apologies if this should go into Dependabot Core, let me know if I should reopen there. Using Dependabot for Hex via Dependabot Script in GitHub Enterprise is mostly working okay....

asummers

Note about `Faraday::Error::ClientError is deprecated`

1

I get this note when I run the script ```bash $ bundle exec ruby ./generic-update-script.rb NOTE: Inheriting Faraday::Error::ClientError is deprecated; use Faraday::ClientError instead. It will be removed in or after...

ahmadalfy

Is it possible to configure the directory where Dependabot downloads the files to? It would be also great if this working directory were configurable via an environment variable.

augi

How to set DIRECTORY_PATH

2

Hi! I can't set `DIRECTORY_PATH` correctly. Currently my `.gitlab-ci.yml` looks like this ```yml .dependabot: image: dependabot/dependabot-core variables: PACKAGE_MANAGER: $CI_JOB_NAME before_script: - bundle install -j $(nproc) --path vendor script: bundle exec...

vv12131415

 we have integrated dependabot-script in our jenkins pipeline(running inside docker) the current dependabot-omnibus running on it is v0.117.3, however for the last couple of eslint updates we are noticing...

timemites