Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

dependabot: pick up transitive (indirect) dependencies #814

Merged
merged 1 commit into from
Sep 25, 2023
Merged

dependabot: pick up transitive (indirect) dependencies #814

merged 1 commit into from
Sep 25, 2023

Conversation

sophiewigmore
Copy link
Member

@sophiewigmore sophiewigmore commented Sep 22, 2023 •
edited
Loading

Summary

Follow up to #813, add config for Dependabot to pick up transitive go.mod dependencies instead
Tested in Bundler and it worked well:
paketo-buildpacks/bundler#566
paketo-buildpacks/bundler#565
paketo-buildpacks/bundler#564
paketo-buildpacks/bundler#563
paketo-buildpacks/bundler#562
paketo-buildpacks/bundler#561

Use Cases

Checklist

  • I have viewed, signed, and submitted the Contributor License Agreement.
  • I have linked issue(s) that this PR should close using keywords or the Github UI (See docs)
  • I have added an integration test, if necessary.
  • I have reviewed the styleguide for guidance on my code quality.
  • I'm happy with the commit history on this PR (I have rebased/squashed as needed).

@sophiewigmore sophiewigmore marked this pull request as ready for review September 25, 2023 14:01
@sophiewigmore sophiewigmore requested a review from a team as a code owner September 25, 2023 14:01
@robdimsdale robdimsdale merged commit 8c082b2 into main Sep 25, 2023
3 checks passed
@robdimsdale robdimsdale deleted the transitive-dependabot branch September 25, 2023 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ForestEckhardt ForestEckhardt ForestEckhardt approved these changes

@robdimsdale robdimsdale robdimsdale approved these changes

@ryanmoran ryanmoran Awaiting requested review from ryanmoran ryanmoran is a code owner automatically assigned from paketo-buildpacks/tooling-maintainers

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@sophiewigmore @robdimsdale @ForestEckhardt