Skip to content

Have Dependabot update d3_graph_generator's npm packages - #124

Merged
dduugg merged 1 commit into
mainfrom
add-dependabot-ecosystems
Oct 12, 2026
Merged

dduugg merged 1 commit into
mainfrom
add-dependabot-ecosystems

Conversation

@dduugg

@dduugg dduugg commented Oct 12, 2026

Copy link
Copy Markdown
Contributor
  • Adds an npm entry to .github/dependabot.yml for d3_graph_generator/, so Dependabot updates the graph app's packages (vite, react, d3), not just the gem's dependencies and actions.
  • It has the same monthly schedule, single group and 7-day cooldown as the other entries. That directory's yarn.lock is tracked.
  • spec/sample_app1 has its own Gemfile and Gemfile.lock, but it's a fixture for the specs, so it's left out.

Dependabot updated the gem's bundler dependencies and its actions, but
not the packages of the graph app in d3_graph_generator/, such as vite
and react. The npm entry points at that directory, whose yarn.lock is
tracked, and takes the same monthly schedule, single group and 7-day
cooldown as the other entries.

spec/sample_app1 also has a Gemfile and Gemfile.lock, but it is a
fixture for the specs, so it's left out.
@dduugg
dduugg marked this pull request as ready for review October 12, 2026 20:34
@dduugg
dduugg requested a review from a team as a code owner October 12, 2026 20:34
@dduugg
dduugg merged commit 2571360 into main Oct 12, 2026
13 checks passed
@dduugg
dduugg deleted the add-dependabot-ecosystems branch October 12, 2026 20:35
@github-project-automation github-project-automation Bot moved this from Triage to Done in Modularity Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant