You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have recently run Dependabot to check for security updates and reported another related issue on #1490. My configuration specifies multiple directories for npm and pip package managers. During a recent build, Dependabot identified numexpr as a vulnerable security package but failed to locate the exact requirements.txt file path within the multiple directories, resulting in the error 'security_update_dependency_not_found'. However, it successfully created a PR when I specified a single directory containing the numexpr package. Please let me know if I should specify a single directory exclusively for security updates or if I can proceed with the following Dependabot configuration as it is.
@SatheeshS-optym thanks for the report. My understanding is that multiple directories should work and your configuration appears to be sane. I'm not very familiar with python or pip but when I have some free time I will attempt to reproduce the issue using your config and see if I can find out what is going wrong.
I have recently run Dependabot to check for security updates and reported another related issue on #1490. My configuration specifies multiple directories for npm and pip package managers. During a recent build, Dependabot identified numexpr as a vulnerable security package but failed to locate the exact requirements.txt file path within the multiple directories, resulting in the error 'security_update_dependency_not_found'. However, it successfully created a PR when I specified a single directory containing the numexpr package. Please let me know if I should specify a single directory exclusively for security updates or if I can proceed with the following Dependabot configuration as it is.
Please find the attached detailed logs here,
5_Run Dependabot.txt
dependabot.yml
The text was updated successfully, but these errors were encountered: