Skip to content

Create dependabot.yml#57

Merged
helenahalldiniths merged 2 commits into
mainfrom
Issue9-Dependabot
Mar 18, 2022
Merged

Create dependabot.yml#57
helenahalldiniths merged 2 commits into
mainfrom
Issue9-Dependabot

Conversation

@FelixJacobsen

Copy link
Copy Markdown
Contributor

Fix #9

Enabled dependabot in repository settings and created this dependabot.yml file that does checks daily.

Enabled dependabot in repository settings and created this dependabot.yml file that does checks daily.
@helenahalldiniths helenahalldiniths self-requested a review March 14, 2022 15:57

@helenahalldiniths helenahalldiniths left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@LordRekishi

Copy link
Copy Markdown
Contributor

I think this file should be directly in the .github folder (not workflow). https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/enabling-and-disabling-dependabot-version-updates

Yes you are right, I double-checked the "storm" repository and it was directly in the .github directory.

@LordRekishi LordRekishi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Move dependabot.yml to the .github directory instead of the sub directory of workflows

@FelixJacobsen

Copy link
Copy Markdown
Contributor Author

@LordRekishi I can't make any changes on Github since your request makes the entire file empty

@helenahalldiniths helenahalldiniths left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good job

@helenahalldiniths helenahalldiniths merged commit 1dcc89f into main Mar 18, 2022
@helenahalldiniths helenahalldiniths deleted the Issue9-Dependabot branch March 18, 2022 13:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enable Dependabot

3 participants