fornjot icon indicating copy to clipboard operation
fornjot copied to clipboard

Dependabot is currently not working

Open hannobraun opened this issue 3 years ago • 2 comments

Rust 1.64.0 comes with support for a new Cargo feature: workspace inheritance. I started using this pretty much immediately (#1132), as it makes the version update that is part of the weekly release much easier, on top of consolidating a lot of redundant metadata.

Unfortunately, Dependabot doesn't support workspace inheritance yet: https://github.com/dependabot/dependabot-core/issues/5315

This means, Dependabot no longer does anything for this repository. It just fails with an error every week. This is unfortunate, but right now I'm not considering rolling the change back. I think the benefits from workspace inheritance outweigh the benefits from Dependabot. I'm opening this issue to document and track the problem. Labeling as https://github.com/hannobraun/Fornjot/labels/status%3A%20blocked.

hannobraun avatar Sep 27 '22 09:09 hannobraun

I opened a PR for it https://github.com/dependabot/dependabot-core/pull/5794, it should work but it's not merged yet.

It's probably possible to regenerate the docker container and use it locally to make the necessary changes but I have no idea how to do that

poliorcetics avatar Oct 05 '22 12:10 poliorcetics

Thank you, @poliorcetics, that's awesome! Hope it gets merged soon!

It's probably possible to regenerate the docker container and use it locally to make the necessary changes but I have no idea how to do that

I have no idea either. I don't know anything about how Dependabot works, and not a lot about Docker either. For now, I'm happy to run cargo update manually every week or so.

hannobraun avatar Oct 05 '22 12:10 hannobraun

Dependabot is active again. Thanks again, @poliorcetics!

hannobraun avatar Oct 10 '22 12:10 hannobraun