Jeff Widman

Results 587 comments of Jeff Widman

Your suggested solution is effectively a duplicate of: * https://github.com/dependabot/dependabot-core/issues/1778 However, I think the problem you're trying to solve is a little different... that's about running the update jobs on...

We've updated this repo's README with a [deprecation note](https://github.com/dependabot/dependabot-script?tab=readme-ov-file#this-repo-is-deprecated) which points to a [new example repo](https://github.com/dependabot/example-cli-usage/) we setup to demonstrate how to self-host Dependabot using the [Dependabot CLI](https://github.com/dependabot/cli). As a...

We've updated this repo's [README](https://github.com/dependabot/dependabot-script/blob/main/README.md) with a deprecation note which points to a [new repo](https://github.com/dependabot/example-cli-usage/) we setup to demonstrate how to self-host Dependabot. As a result, we are archiving this...

To clarify, is this feature request about "open Dependabot PR's" or "open Dependabot security alerts"?? PR's can be generated from security alerts, but can also of course be configured for...

Thanks @erinhav. I'm going to close as this has effectively been shipped/resolved, although it's part of one of our paid products so not available to all orgs. I expect over...

That is a reasonable request. I'm not convinced this issue tracker is the best place to track that, but I'm also not sure where to redirect you towards so for...

This new API is tangentially related to this issue: * https://github.blog/changelog/2023-07-11-update-and-show-status-of-dependabot-security-updates-in-api/ Although it doesn't directly address this issue, but nevertheless I suspect it's still useful to some of the folks...

I'm torn myself @macnewbold ... pulling in beautiful soup definitely does _not_ make sense for just this single PR... but I can also see the benefit of having it available...

Thanks for the heads up @ashb , I fixed the labels. @carogalvin is awesome, and she's still at GitHub, but she's moved to product managing a different team/product, so no...

@braedon want to submit a PR porting their change to here?