deepmodeling / deepmodeling/deepmodeling_sphinx

[Code scan] Extend Dependabot coverage beyond GitHub Actions

Open
#92 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
CSS
Stars
2
Forks
6
PR merge metrics
No merged PRs in 30d

Description

This issue is a result of a Codex global code scan of deepmodeling/deepmodeling_sphinx at commit 156679fe55fc61e8ec3b1e9be8a45fde3567b9cb.

Problem

Dependabot currently updates only the `github-actions` ecosystem. Python package dependencies, documentation dependencies, and pre-commit hooks are declared elsewhere but do not receive automated update PRs.

Code references:

https://github.com/deepmodeling/deepmodeling_sphinx/blob/156679fe55fc61e8ec3b1e9be8a45fde3567b9cb/.github/dependabot.yml#L1-L6
https://github.com/deepmodeling/deepmodeling_sphinx/blob/156679fe55fc61e8ec3b1e9be8a45fde3567b9cb/pyproject.toml#L17-L24
https://github.com/deepmodeling/deepmodeling_sphinx/blob/156679fe55fc61e8ec3b1e9be8a45fde3567b9cb/docs/requirements.txt#L1-L6
https://github.com/deepmodeling/deepmodeling_sphinx/blob/156679fe55fc61e8ec3b1e9be8a45fde3567b9cb/.pre-commit-config.yaml#L3-L29

Impact

Runtime, docs, and linting dependencies can go stale without automated visibility, while workflow actions do get update coverage.

Suggested fix

Add Dependabot entries for `pip` dependency files and `pre-commit`, or document that these dependencies are intentionally maintained manually.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.