Skip to content

Commit

Permalink
Fix Dependabot config
Browse files Browse the repository at this point in the history
The previous couple of commits were aimed at trying to tighten the
security of the Dependabot config by not allowing all dependencies to
allow insecure external code execution.

But it seems Dependabot only allows unique ecosystems in a file:

> Update configs must have a unique combination of 'package-ecosystem',
> 'directory', and 'target-branch'. Ecosystem 'bundler' has
> overlapping directories.

So we need to revert these changes to get Dependabot working again.
  • Loading branch information
jackbot committed Jan 23, 2025
1 parent 27ab2ed commit f72b753
Showing 1 changed file with 1 addition and 6 deletions.
7 changes: 1 addition & 6 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,12 +1,7 @@
version: 2
updates:
- package-ecosystem: bundler
directory: /
schedule:
interval: daily
- package-ecosystem: bundler
registries:
- github
registries: "*"
insecure-external-code-execution: allow
directory: /
schedule:
Expand Down

0 comments on commit f72b753

Please sign in to comment.