Jeff Widman
Jeff Widman
👋 thanks for dropping by. Can you clarify a little more: * how you'd want to use this? Ie, what would your bot do? * And which parts of this...
Closing due to lack of response.
Interesting idea, but we'd probably need this first: * https://github.com/dependabot/dependabot-core/issues/1927 There is some additional dynamic validation we do that can't be expressed in a JSON Schema, but it'd at least...
To clarify, @jlosito you're requesting syntax validation here, not linting, right? They're not _quite_ the same thing.
We do indeed have enough stars and forks that our contribution passes the Homebrew bar. We don't have enough watchers, but I'm unclear if we have to pass all criteria,...
Thanks @LukeCarrier really appreciate you driving this forward!
There isn't a way to skip private registries that I'm aware of. 1. If your dependency tree includes private packages, then for many ecosystems :dependabot: needs to fetch those packages...
Hmm... you got me there. Re-opening. Can you share logs of a GitHub Actions run vs a CLI run? Feel free to do so via a support ticket if needed,...
We actually do have this automation in place... but I think `dist` only needs to be rebuilt when a prod `npm` dep changes? I'm not super familiar with `npm` ecosystem,...
Ah, so the code comment is incorrect then... `dist/` is expected to have changes even when deps don't change...