decentralized-identity / decentralized-identity/web5-js
`dependabot` PRs not updating `pnpm-lock.yaml`
Open
- Dominant language
- TypeScript
- Stars
- 142
- Forks
- 56
- PR merge metrics
- No merged PRs in 30d
Description
`dependabot` PRs currently do not include `pnpm-lock.yaml`, upon the PR merged, the release workflow runs `pnpm install --frozen-lockfile` which expects the `pnpm-lock.yaml` to be up-to-date (not allowed to change), but since it is not, the workflow fails.
Some possible solutions:
1. Update dependabot to include `pnpm-lock.yaml`
1. Update release workflow to allow `pnpm-lock.yaml` to be modified.
1. Remove dependabot (not ideal because we introduced it for another reason: we depended on obsolete dependencies and were pinged by `tbdex` team)
Contributor guide
Assessment
This issue has not been assessed yet.