Jeff Widman

A PR would be most welcome.

No one has submitted support for it yet, but we would certainly welcome a PR!

It looks like https://github.com/dependabot/dependabot-core/pull/6632 fixes this, but you didn't cross-link it... does it only fix a subset for some reason?

We revamped our deploy workflow a few months ago so that we typically deploy a `dependabot-core` PR to the GitHub.com native service before we merge back to `main`... this results...

We've updated this repo's [README](https://github.com/dependabot/dependabot-script/blob/main/README.md) with a deprecation note which points to a [new repo](https://github.com/dependabot/example-cli-usage/) we setup to demonstrate how to self-host Dependabot. As a result, we are archiving this...

We've updated this repo's README with a [deprecation note](https://github.com/dependabot/dependabot-script?tab=readme-ov-file#this-repo-is-deprecated) which points to a [new example repo](https://github.com/dependabot/example-cli-usage/) we setup to demonstrate how to self-host Dependabot using the [Dependabot CLI](https://github.com/dependabot/cli). As a...

👍 for this issue. It'd make it easier to test/mock/increase flexibility.

Re-opened per: * https://github.com/dependabot/dependabot-core/issues/1666#issuecomment-1282890717 * https://github.com/dependabot/dependabot-core/issues/5923#issuecomment-1282965660

LOL, I filed pretty much this exact ticket on our internal issue tracker yesterday morning. So I clearly think it's a good idea. We generally want to avoid tight coupling...

You might want to also take a look at https://github.com/dependabot/dependabot-core/pull/13608 for inspiration... anything that improves the base image will pay dividends across _all_ the ecosystem-level images. To be clear though,...