fix: fix dependabot registries

Author: zdm

lib/package.js

@@ -8,7 +8,7 @@ import { readConfig, readConfigSync, writeConfigSync } from "#core/config";
 import env from "#core/env";
 import File from "#core/file";
 import FileTree from "#core/file-tree";
-import { chmodSync, pathExists, pathExistsSync } from "#core/fs";
+import { chmodSync, pathExists, pathExistsSync, rm } from "#core/fs";
 import { glob, globSync } from "#core/glob";
 import GlobPatterns from "#core/glob/patterns";
 import Locale from "#core/locale";
@@ -1369,6 +1369,7 @@ export default class Package {
 
         var filename,
             config,
+            registries = new Map(),
             updates = new Map();
 
         if ( await pathExists( this.root + "/.github/dependabot.yaml" ) ) {
@@ -1386,6 +1387,10 @@ export default class Package {
         }
 
         if ( config ) {
+            for ( const registry in config.registries ) {
+                registries.set( registry, config.registries[ registry ] );
+            }
+
             for ( const update of config.updates || [] ) {
                 if ( update[ "package-ecosystem" ] === "npm" ) continue;
 
@@ -1412,6 +1417,7 @@ export default class Package {
             if ( directories.size ) {
                 updates.set( "npm", {
                     "package-ecosystem": "npm",
+                    "registries": "*",
                     "directories": [ ...directories ].sort(),
                     "schedule": {
                         "interval": this.cliConfig.meta.dependabot.npm.interval,
@@ -1421,13 +1427,20 @@ export default class Package {
                     },
                     "open-pull-requests-limit": this.cliConfig.meta.dependabot.npm[ "open-pull-requests-limit" ],
                 } );
+
+                registries.set( "npm.pkg.github.com", {
+                    "type": "npm-registry",
+                    "url": "https://npm.pkg.github.com",
+                    "token": "${{secrets.DEPENDABOT_GITHUB_TOKEN}}",
+                } );
             }
         }
 
         // docker
         if ( this.cliConfig?.meta.dependabot.docker?.enabled && this.hasDockerfile ) {
             updates.set( "docker", {
                 "package-ecosystem": "docker",
+                "registries": "*",
                 "directories": [ "/" ],
                 "schedule": {
                     "interval": this.cliConfig.meta.dependabot.docker.interval,
@@ -1437,6 +1450,13 @@ export default class Package {
                 },
                 "open-pull-requests-limit": this.cliConfig.meta.dependabot.docker[ "open-pull-requests-limit" ],
             } );
+
+            registries.set( "ghcr.io", {
+                "type": "docker-registry",
+                "url": "ghcr.io",
+                "username": "${{github.repository_owner}}",
+                "password": "${{secrets.DEPENDABOT_GITHUB_TOKEN}}",
+            } );
         }
 
         // github-actions
@@ -1474,30 +1494,38 @@ export default class Package {
             }
         }
 
+        // dependabot is not configured
         if ( !updates.size ) {
             if ( await pathExists( this.root + "/.github" ) ) {
+
+                // remove dependabot config
                 await fs.promises.rm( this.root + "/.github/" + filename, {
                     "force": true,
                 } );
 
-                const files = await fs.promises.readdir( this.root + "/.github" );
-
-                if ( !files.length ) {
-                    await fs.promises.rm( this.root + "/.github", {
-                        "recursive": true,
-                    } );
-                }
+                // remove empty ".github" directory
+                await rm( this.root + "/.github", {
+                    "ifDirectoryEmpty": true,
+                    "recursive": true,
+                } );
             }
 
             return result( 200 );
         }
 
         config = {
             "version": 2,
-            "updates": [],
         };
 
+        for ( const registry of [ ...registries.keys() ].sort() ) {
+            config.registries ??= {};
+
+            config.registries[ registry ] = registries.get( registry );
+        }
+
         for ( const update of [ ...updates.keys() ].sort() ) {
+            config.updates ??= [];
+
             config.updates.push( updates.get( update ) );
         }