Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to add multiple directories in dependabot.yml config file? #2824

Closed
Zethson opened this issue Dec 7, 2020 · 9 comments
Closed

How to add multiple directories in dependabot.yml config file? #2824

Zethson opened this issue Dec 7, 2020 · 9 comments
Labels
T: feature-request Requests for new features

Comments

@Zethson
Copy link

Zethson commented Dec 7, 2020

version: 2
updates:
  - package-ecosystem: "composer"
    # Files stored in repository root
    directory: "/"
    schedule:
      interval: "daily"

If I want Dependabot to check both, the / directory and e.g. /app directory for the same ecosystem, how would I do that?
Everything that I find online refers to the old UI and not the config file.

@Zethson Zethson added the T: feature-request Requests for new features label Dec 7, 2020
@jamesmcguirepro
Copy link

I have the same problem.

I have multiple projects in different folders and would like a way to list multiple directories for a single package ecosystem, so dependabot can handle all projects at once.

Ie:

/Project1/project1.csproj
/Project2/project2.csproj
/Project3/project3.csproj

The only way that I have found so far is to create an ecosystem for each folder, which is tedious and repetitive, especially since they all have the same update schedule, default reviewers, default labels and the same list of ignored dependencies.

@feelepxyz
Copy link
Contributor

@Zethson you'll have to add each directory like so:

version: 2
updates:
  - package-ecosystem: "composer"
    directory: "/"
    schedule:
      interval: "daily"
  - package-ecosystem: "composer"
    directory: "/app"
    schedule:
      interval: "daily"

We have some ideas to improve this allowing globs/arrays of directories for the same ecosystem.

@Zethson
Copy link
Author

Zethson commented Dec 9, 2020

@feelepxyz thank you very much.
Not ideal yet, but certainly something to work with.

@Zethson Zethson closed this as completed Dec 9, 2020
@jamesmcguirepro
Copy link

@feelepxyz Is there an issue we can follow to track those ideas for allowing globs/arrays of directories for the same ecosystem?

@feelepxyz
Copy link
Contributor

@jamesmcguirepro yup #2178

feelepxyz added a commit that referenced this issue Mar 8, 2021
v7.6.1 (2021-03-04) https://github.com/npm/cli/releases/tag/v7.6.1

BUG FIXES
3c9a589b0 #2807 npm explain show when an edge is a bundled edge (@kumavis)
b33c760ce #2766 unused arguments cleanup (@sandersn)
4a5dd3a5a #2772 fix(npm) pass npm context everywhere (@wraithgar)
e69be2ac5 #2789 fix npm prefix on all Windows unix shells (@isaacs)
2d682e4ca #2803 fix(search): don't pass unused args (@wraithgar)
b3e7dd19b #2822 fix(diff): set option "where" for pacote (@ruyadorno)
96006640b #2824 fix(repo, auth.sso): don't promisify open-url (@wraithgar)

DOCUMENTATION
c8b73db82 #2690 fix(docs): update scripts docs (@wraithgar)
5d922394b #2809 update republish timeout after unpublish (@BAJ-)

DEPENDENCIES
2d4ae598f @npmcli/arborist@2.2.6
feelepxyz added a commit that referenced this issue Mar 8, 2021
v7.6.1 (2021-03-04) https://github.com/npm/cli/releases/tag/v7.6.1

BUG FIXES
3c9a589b0 #2807 npm explain show when an edge is a bundled edge (@kumavis)
b33c760ce #2766 unused arguments cleanup (@sandersn)
4a5dd3a5a #2772 fix(npm) pass npm context everywhere (@wraithgar)
e69be2ac5 #2789 fix npm prefix on all Windows unix shells (@isaacs)
2d682e4ca #2803 fix(search): don't pass unused args (@wraithgar)
b3e7dd19b #2822 fix(diff): set option "where" for pacote (@ruyadorno)
96006640b #2824 fix(repo, auth.sso): don't promisify open-url (@wraithgar)

DOCUMENTATION
c8b73db82 #2690 fix(docs): update scripts docs (@wraithgar)
5d922394b #2809 update republish timeout after unpublish (@BAJ-)

DEPENDENCIES
2d4ae598f @npmcli/arborist@2.2.6
feelepxyz added a commit that referenced this issue Mar 8, 2021
v7.6.1 (2021-03-04) https://github.com/npm/cli/releases/tag/v7.6.1

BUG FIXES
3c9a589b0 #2807 npm explain show when an edge is a bundled edge (@kumavis)
b33c760ce #2766 unused arguments cleanup (@sandersn)
4a5dd3a5a #2772 fix(npm) pass npm context everywhere (@wraithgar)
e69be2ac5 #2789 fix npm prefix on all Windows unix shells (@isaacs)
2d682e4ca #2803 fix(search): don't pass unused args (@wraithgar)
b3e7dd19b #2822 fix(diff): set option "where" for pacote (@ruyadorno)
96006640b #2824 fix(repo, auth.sso): don't promisify open-url (@wraithgar)

DOCUMENTATION
c8b73db82 #2690 fix(docs): update scripts docs (@wraithgar)
5d922394b #2809 update republish timeout after unpublish (@BAJ-)

DEPENDENCIES
2d4ae598f @npmcli/arborist@2.2.6
@Snailedlt
Copy link

Would be neat if directory could take a list or an array of paths too...
maybe something like this?

  - package-ecosystem: "composer"
    directory: 
      - "/app"
      - "/"
    schedule:
      interval: "daily"

@jessehouwing
Copy link

Or the ability to use wildcards.
Or that dependabot would recursively search for my manifests.

@konstantinwirz
Copy link

for each folder, which is te

any news on this topic?

@RDhar
Copy link

RDhar commented Feb 11, 2023

This can be closed as a duplicate of the older #2178 which has greater visibility.

AlexanderYastrebov added a commit to zalando/skipper that referenced this issue Jul 17, 2023
See dependabot/dependabot-core#2824

Followup on #2306

Signed-off-by: Alexander Yastrebov <alexander.yastrebov@zalando.de>
AlexanderYastrebov added a commit to zalando/skipper that referenced this issue Jul 17, 2023
See dependabot/dependabot-core#2824

Followup on #2306

Signed-off-by: Alexander Yastrebov <alexander.yastrebov@zalando.de>
robin-a-meade added a commit to robin-a-meade/jbang-catalog that referenced this issue Feb 20, 2024
Seems dependabot looks specifically for pom files named `pom.xml`.
We therefore introduce an additional level of directories (named same
as the alias.)

Unfortunately, these means we'll need to edit `dependabot.yml` as
we add and remove aliases. See:
- dependabot/dependabot-core#3951
- dependabot/dependabot-core#2824
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
T: feature-request Requests for new features
Projects
None yet
Development

No branches or pull requests

7 participants