Skip to content

Create dependabot.yml #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Kinin-Code-Offical wants to merge 1 commit into
base: master
Choose a base branch
from
+11 −0
Open

Create dependabot.yml #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

version: 2
updates:
- package-ecosystem: "" # See documentation for possible values
Copy link

@sourcery-ai sourcery-ai bot Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

issue (bug_risk): Specify a concrete package-ecosystem to avoid this config being a no-op.

Leaving package-ecosystem empty means Dependabot will not run. Set this to the correct ecosystem for this repo (e.g., "npm", "github-actions", "pip"), or add multiple updates entries if you need to support more than one.

Copy link

Copilot AI Dec 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package-ecosystem field is set to an empty string, which will cause Dependabot to fail. Based on the repository structure (package.json exists), this should be set to "npm". Consider also adding configurations for "docker" since Dockerfile and docker-compose.yml are present, and "github-actions" if any workflows exist.

Suggested change
- package-ecosystem: "" # See documentation for possible values
- package-ecosystem: "npm" # See documentation for possible values

Copilot uses AI. Check for mistakes.
directory: "/" # Location of package manifests
schedule:
interval: "weekly"