Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Move .github/dependabot.yml to .github/workflows/dependabot.yml #1056

Closed
wants to merge 1 commit into from

Conversation

ericwb
Copy link
Member

@ericwb ericwb commented Sep 18, 2023

GitHub expects actions workflows to be defined in the .github/workflows directory. See https://docs.github.com/en/actions/using-workflows/about-workflows

Fixes #1055

@mportesdev
Copy link
Contributor

Hi Eric, I'm not sure this is correct. I think this file serves as a config for Dependabot, and is not an actual Actions workflow. According to the docs, it should be placed in .github:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file

@mportesdev
Copy link
Contributor

Can you check whether Dependabot is enabled for this repository? (Settings > Code security and analysis) I cannot tell as a non-maintainer.

@ericwb
Copy link
Member Author

ericwb commented Sep 19, 2023

Hi Eric, I'm not sure this is correct. I think this file serves as a config for Dependabot, and is not an actual Actions workflow. According to the docs, it should be placed in .github:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#about-the-dependabotyml-file

Good catch. I'll close this one.

@ericwb
Copy link
Member Author

ericwb commented Sep 19, 2023

Can you check whether Dependabot is enabled for this repository? (Settings > Code security and analysis) I cannot tell as a non-maintainer.

Yep, it's enabled.

@ericwb ericwb closed this Sep 19, 2023
@PyCQA PyCQA deleted a comment Jul 18, 2024
@ericwb ericwb deleted the ericwb-patch-1 branch July 18, 2024 14:20
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

dependabot.yml should be in .github/workflows
2 participants