dependabot / dependabot/dependabot-core

Have influence on the NODEJS version the dependabot action is taking place

Open
#11,069 0 comments 6 reactions 0 assignees View on GitHub
T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

We have a monorepo where we force the users to have a specific version in our package.json and `.nvmrc` file.
But the dependabot action is running on Node20 while we run 22.11.0 at the moment. How can we have influence on this value?

relates to https://github.com/dependabot/dependabot-core/issues/7426#issuecomment-1592634758 but for over a year this seems to be wish ...

Contributor guide

Open the contributing guide

Research direction

Start by tracing how the Dependabot action selects its Node.js runtime and compare that with the versions declared in package.json and .nvmrc. Done means establishing a supported way to control or align the action's runtime with the repository's Node 22.11.0 requirement.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, node.js
Domain
ci-cd
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.