-
Notifications
You must be signed in to change notification settings - Fork 9.7k
Add dependabot for Gradle dependencies #5440
Conversation
.github/dependabot.yml
Outdated
| - package-ecosystem: "gradle" | ||
| directory: "/packages/flutter_plugin_android_lifecycle/example/android/app" | ||
| schedule: | ||
| interval: "weekly" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
FWIW, I'd suggest making the interval daily, just to spread out the dependabot PRs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
sgtm. PTAL
stuartmorgan-g
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice!
Should we put a commit-message entry to do the [plugin_name] prefix?
.github/dependabot.yml
Outdated
| version: 2 | ||
| updates: | ||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/flutter_plugin_android_lifecycle/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will checking the examples transitively check and update the plugin dependencies themselves?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think so. It's not very smart from what I can tell
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/webview_flutter/webview_flutter/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should order this file alphabetically by directory so we can easily see what's there.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/webview_flutter/webview_flutter/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Speaking of which, the _android package is missing here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/connectivity/connectivity/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This plugin doesn't exist any more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/video_player/video_player_android/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The app-facing package is missing.
With only a couple of exceptions, there should be two examples for every plugin.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/espresso/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is a duplicate entry.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
stuartmorgan-g
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM with more added. I'm not sure I caught everything though.
Given that this is fiddly to get right, and will silently get out of sync with changes (e.g., federating the last couple of plugins), I think I should make tooling that verifies dependabot coverage. It'll be useful when we enable Dart dependabot too.
I'll file an issue for that. (Doesn't need to block yours though).
| schedule: | ||
| interval: "daily" | ||
| open-pull-requests-limit: 10 | ||
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The app-facing package's example is missing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
url_launcher doesn't have an app-facing package. https://github.com/flutter/plugins/tree/main/packages/url_launcher/url_launcher
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/path_provider/path_provider_android/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The plugin is missing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/image_picker/image_picker/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is missing both parts of the implementation package.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/espresso/example/android/app" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The plugin is missing.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done
|
This has failed in master with the following: Your .github/dependabot.yml contained invalid detailsDependabot encountered the following error when parsing your .github/dependabot.yml: Please update the config file to conform with Dependabot's specification. For more info on the config file format, see the config file documentation |
|
Cool way of regexing the baddies: prefix: "\[[^\]]{14,}\]" |
Adds dependabot for Gradle dependencies.
Unfortunately, dependabot doesn't support globs patterns in directory.
cc @stuartmorgan