Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move .github/dependabot.yml to .github/workflows/dependabot.yml #1056

Closed
wants to merge 1 commit into from

Conversation

ericwb
Copy link
Member

@ericwb ericwb commented Sep 18, 2023

GitHub expects actions workflows to be defined in the .github/workflows directory. See https://docs.github.com/en/actions/using-workflows/about-workflows

Fixes #1055

@mportesdev
Copy link
Contributor

Hi Eric, I'm not sure this is correct. I think this file serves as a config for Dependabot, and is not an actual Actions workflow. According to the docs, it should be placed in .github:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file

@mportesdev
Copy link
Contributor

Can you check whether Dependabot is enabled for this repository? (Settings > Code security and analysis) I cannot tell as a non-maintainer.

@ericwb
Copy link
Member Author

ericwb commented Sep 19, 2023

Hi Eric, I'm not sure this is correct. I think this file serves as a config for Dependabot, and is not an actual Actions workflow. According to the docs, it should be placed in .github:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file

Good catch. I'll close this one.

@ericwb
Copy link
Member Author

ericwb commented Sep 19, 2023

Can you check whether Dependabot is enabled for this repository? (Settings > Code security and analysis) I cannot tell as a non-maintainer.

Yep, it's enabled.

@ericwb ericwb closed this Sep 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

dependabot.yml should be in .github/workflows
2 participants