Fix Dependabot configuration: remove unsupported cmake package ecosystem #6
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR fixes the Dependabot configuration error that was preventing dependency scanning from working properly.
Problem
Dependabot was failing to parse
.github/dependabot.ymlwith the following error:Root Cause
The configuration included
package-ecosystem: "cmake"which is not a supported ecosystem by Dependabot. While this C++ project uses CMake for building, it manages dependencies through system packages viafind_package()andpkg_check_modules()rather than a package manager that Dependabot can monitor.Solution
cmakepackage ecosystem entrydockerpackage ecosystem entry (no Dockerfile exists in the repository)github-actionsecosystem entry for monitoring GitHub Actions workflow dependenciesResult
The Dependabot configuration now:
This maintains security monitoring for the parts of the project that Dependabot can actually scan while removing the invalid configurations that were causing parsing errors.
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.