Skip to content

DINO-1038: add dependabot config - #10

Open
tahminator wants to merge 2 commits into
mainfrom
DINO-1038
Open

tahminator wants to merge 2 commits into
mainfrom
DINO-1038

Conversation

@tahminator

Copy link
Copy Markdown
Member

Adds .github/dependabot.yml with weekly version updates for:

  • github-actions: /, /.github/composite/**
  • bun: /.github/scripts
  • docker: /src/*

Ticket: https://codebloom.notion.site/Enable-Dependabot-across-all-Patina-Network-repos-3f07c85563aa81ea96a6f5ff599ad02d

Validated against the SchemaStore Dependabot schema (check-jsonschema --builtin-schema vendor.dependabot).

@tahminator
tahminator requested a review from a team October 17, 2026 02:30
Comment thread .github/dependabot.yml Outdated
directory: /.github/scripts
schedule: { interval: weekly }
- package-ecosystem: docker
directory: /src/*

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The docker entry uses the singular directory key with a glob (/src/*). Dependabot only expands globs under the plural directories key. directory is treated as a literal path, so /src/* will not resolve and no Dockerfile under src/ will get version updates (Dependabot will report a missing-directory error). The schema check still passes because the value is just a string. Fix:

  - package-ecosystem: docker
    directories:
      - "/src/*"
    schedule: { interval: weekly }
Suggested change
directory: /src/*
directories:
- "/src/*"

Spotted by Graphite

Fix in Graphite


Is this helpful? React 👍 or 👎 to let us know.

@sonarqubecloud

Copy link
Copy Markdown

@tahminator
tahminator enabled auto-merge (squash) October 17, 2026 02:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants