Consider YAML 1.2 for dependabot configuration #109188
Unanswered
erickgskovik
asked this question in
Code Security
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Select Topic Area
Product Feedback
Body
Hello!
I am trying to integrate dependabot. But I have to quote
updates.[0].scheduel.time
otherwise the field becomes sexagesimal. This is no longer the case for YAML 1.2 where I don't have to quote the time. So this is surprising when the config fails.Since the document didn't mention YAML 1.1 and GitHub Action seems using YAML 1.2, maybe consider using YAML 1.2 spec for dependabot config file too?
Example:
Beta Was this translation helpful? Give feedback.
All reactions