last week I added a depandabot config to automatic...
# development
p
last week I added a depandabot config to automatically create PRs to update rust crates: https://github.com/pantsbuild/pants/blob/main/.github/dependabot.yml However this doesn't seem to work, for example when I added this file in our private repo we got a depandabot tab under
Dependency graph
page: https://github.com/pantsbuild/pants/network/dependencies which makes me thing that GH ignores the file the docs says someone with a write access need to modify it and maybe because I don't have that access my change is ignored... https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependen[…]tomatically/enabling-and-disabling-dependabot-version-updates @hundreds-father-404 can u try and make a trivial change to this file and see if that helps (maybe change the schedule to daily updates and tweak the hour to noon PST): https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependen[…]ed-automatically/configuration-options-for-dependency-updates
h
Screen Shot 2022-01-06 at 10.52.02 AM.png
probably shouldn't start with
/
in the path, right?
p
it works for the toolchain private repo...
Screen Shot 2022-01-06 at 10.13.30 AM.png
h
specifically this line causes a 404
GET <https://api.github.com/repos/pantsbuild/pants/contents/src/rust/Cargo.toml?ref=269aa343f0210a40f5a237d38ed7625e24143d3d>
p
ok. so I think my PR will fix it. can u make it auto-merge so we hit the updated schedule?
👍 1
I guess I don't see this tab because I don't have permissions. which is fine.