cjsaylor / cjsaylor/chessimage

Dependabot cannot be upgraded to GitHub-native version due to unsupported `dep` package manager

Open
#6 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
5
Forks
5
PR merge metrics
No merged PRs in 30d

Description

Dependabot Preview will be shut down on August 3rd, 2021.

It appears that this repository has configured updates for `dep`.

The GitHub-native version of Dependabot does not support `dep`, which was [deprecated][deprecated] as of 2020.
Guidance from the `dep` maintainers is to upgrade to [go mod][go mod], which Dependabot [supports][supported ecosystems].

In order to keep getting updates for your Go dependencies, you'll need to migrate to `go mod` and add a [Dependabot configuration][Dependabot config file] for it to this repository.

[deprecated]: https://golang.github.io/dep/docs/introduction.html#:~:text=As%20of%202020%2C%20Dep%20is,official%20support%20since%20Go%201.11.&text=This%20is%20documentation%20for%20dep,tool%20for%20the%20Go%20language.
[go mod]: https://golang.org/ref/mod
[supported ecosystems]: https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#package-ecosystem
[Dependabot config file]: https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#about-the-dependabotyml-file

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the repository's existing dep configuration and Go dependency declarations. Migrate the dependencies to Go modules and add a Dependabot configuration for the supported Go module ecosystem; done means dependency updates continue after the legacy dep setup is removed.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
devops
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.