dependabot / dependabot/dependabot-core
Have influence on the NODEJS version the dependabot action is taking place
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
We have a monorepo where we force the users to have a specific version in our package.json and `.nvmrc` file.
But the dependabot action is running on Node20 while we run 22.11.0 at the moment. How can we have influence on this value?
relates to https://github.com/dependabot/dependabot-core/issues/7426#issuecomment-1592634758 but for over a year this seems to be wish ...
Contributor guide
Research direction
Start by tracing how the Dependabot action selects its Node.js runtime and compare that with the versions declared in package.json and .nvmrc. Done means establishing a supported way to control or align the action's runtime with the repository's Node 22.11.0 requirement.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, node.js
- Domain
- ci-cd
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100