Dependabot partially broken or disabled
freundTech opened this issue · 1 comments
freundTech commented
It looks like dependabot is not correctly running on this repository, despite being configured.
Some submodules are very out of date, leading bat to use outdated syntaxes. Notably 01_Packages points to a 4 years old version of Sublime Packages.
I'm not quite sure why dependabot isn't working, when I forked the repo and enabled dependabot on the fork it did create 48 PRs. It also detected those updates when running the dependabot cli locally.
Places to check:
- https://github.com/sharkdp/bat/settings/security_analysis (is "Dependabot version updates" set to enabled?)
- https://github.com/sharkdp/bat/network/updates (are there any errors or warning in the dependabot logs?)
Both of those URLs are only accessible to maintainers, so I can't investigate further.
keith-hall commented
Packages is ignored by dependabot by design: #1644 (comment)
see #2319 (comment)