Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Problem: Since ebe7d3c, dependabot does not send updates for packages not matching a group. For example, in the "telemetry/vscode/" directory it will only update `jest` and `@types` dependencies. Other deps won't be updated. Hint: #533 (comment) Solution: - Review the inscrutable documentation: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - Reference examples on github via: https://github.com/search?q=path%3Adependabot.yml+groups+all&type=code - Remove `dependency-type` directive. - Try `allow: dependency-name: '*'` directive. - If this doesn't work, later try a "catch-all" group. Note that `groups` are evaluated as "first wins". - Note: intentionally _not_ using ["allow … all" directive](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#allow); it enables updates for _transitive_ dependencies, it's unrelated to "groups": ``` allow: - dependency-type: 'all' ```
- Loading branch information