Skip to content

Have Dependabot update d3_graph_generator's npm packages - #124

Merged
dduugg merged 1 commit into
mainfrom
add-dependabot-ecosystems
Oct 12, 2026
Merged

dduugg merged 1 commit into
mainfrom
add-dependabot-ecosystems

Conversation

@dduugg

@dduugg dduugg commented Oct 12, 2026

Copy link
Copy Markdown
Contributor
  • Adds an npm entry to .github/dependabot.yml for d3_graph_generator/, so Dependabot updates the graph app's packages (vite, react, d3), not just the gem's dependencies and actions.
  • It has the same monthly schedule, single group and 7-day cooldown as the other entries. That directory's yarn.lock is tracked.
  • spec/sample_app1 has its own Gemfile and Gemfile.lock, but it's a fixture for the specs, so it's left out.

Dependabot updated the gem's bundler dependencies and its actions, but
not the packages of the graph app in d3_graph_generator/, such as vite
and react. The npm entry points at that directory, whose yarn.lock is
tracked, and takes the same monthly schedule, single group and 7-day
cooldown as the other entries.

spec/sample_app1 also has a Gemfile and Gemfile.lock, but it is a
fixture for the specs, so it's left out.
@dduugg
dduugg marked this pull request as ready for review October 12, 2026 20:34
@dduugg
dduugg requested a review from a team as a code owner October 12, 2026 20:34
@dduugg
dduugg merged commit 2571360 into main Oct 12, 2026
13 checks passed
@dduugg
dduugg deleted the add-dependabot-ecosystems branch October 12, 2026 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant