Dockerfile updates not triggering

[ArneTR]

@dan-mm The Python version for 3.11 is a already 3.11.5 for about a month

However so far Dependabot has not triggered in this file: https://github.com/green-coding-berlin/green-metrics-tool/blob/main/docker/Dockerfile-gunicorn

Can you tell why?

[dan-mm]

Fixed in main now.

Our dependabot was not configured correctly. It was only looking for dockerfiles located in the root directory.

The main issue here is that dependabot does not search folders recursively:

dependabot/dependabot-core#2178
dependabot/dependabot-core#1015

This means that any new dockerfiles that we add which are not directly in the root of the docker subfolder will also need an update to the dependabot.yml file. this is relevant as we are planning on making and pushing docker containers automatically from the docker/auxiliary-containers folder :-/ Based on the issues posted above, I don't think there's a good solution to this at the moment.

But at least for now, I've updated our dependabot to find our current dockerfiles

[ArneTR]

can be closed? I have seen the Dependabot working now ...