Jeff Widman

Clarify documentation for `versioning-strategy` option

5

We receive the occasional support request and there are also multiple issues filed against https://github.com/dependabot/dependabot-core/ asking about "I tried X strategy for Y ecosystem but it's not working". So rewrite...

I see there's an upcoming release that leverages generics. But no accompanying issue, so thought I'd create one. This way I can subscribe to it and get notified when it's...

Bump to Ruby 3.1?

1

I noticed the Readme and other places reference Ruby 2.6... what's holding back the upgrade to 3.1? Esp since these are actions workflows, IIUC they are isolated and don't require...

Remove ACF Pro from examples now that they support native Composer integration?

5

Want to remove ACF Pro from your examples now that they natively support composer integration? * https://www.advancedcustomfields.com/resources/installing-acf-pro-with-composer/ * https://github.com/pivvenit/acf-pro-installer#warning-deprecated-supported-till-1st-of-june-2023-warning

Can you document this well-known file header in the project readme? https://github.com/dependabot/dependabot-core/issues/4475#issuecomment-1416353842 It'd help avoid me looking like an idiot in https://github.com/dependabot/dependabot-core/issues/4475#issuecomment-1413185642. 😁

I went to open a PR against the readme, but there are two of them... Is that because you want a pretty one for GitHub and a plaintext one to...

Drop Python2 support as part of 2.x release?

2

I realize that many production environments have not migrated to python 3, and normally I would prefer to be the laggard here. However, the timing seems to line up really...

Want to add a note to the readme and then archive this repo? * https://www.advancedcustomfields.com/resources/installing-acf-pro-with-composer/ * https://github.com/pivvenit/acf-pro-installer#warning-deprecated-supported-till-1st-of-june-2023-warning

Document that GitHub Actions already installs `yamllint`

6

I was looking up instructions for how to install `yamllint` so that I could use it in our GitHub actions workflow when I happened to see mention that it's already...

Allow limiting the scope of organization tokens to specific packages

1

This is a feature request to allow limiting the scope of read-only organization tokens to specific packages. In :dependabot: , we have a public unit test that checks that Dependabot...