dependabot / dependabot/dependabot-core

Configure dependabot to create draft PRs

Open
#1,291 18 comments 66 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

F: configuration-file F: pull-requests Keep T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 13h
Merged PRs (30d)
151

Description

Hello,

Is it possible to configure dependabot to create draft PRs instead of regular ones?

We could use this configuration as a workaround of dependabot not supporting golang vendoring (link1, link2(https://dependabot.com/blog/go-support/)). If dependabot could create a draft PR, we could revendor dependencies ourselves, run all tests and commit if everything is fine. For context, our project (Cloudfoundry Garden) is required to be buildable offline and therefore we need updated dependencies revendored in order to ship new releases.

Moderator note: Go vendoring is now supported by Dependabot. Leaving issue open because the feature request is valid for other scenarios.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named in the issue. Start by tracing how Dependabot configuration is parsed and how update pull requests are created, then check existing tests around pull-request options. Done means a configuration can request draft pull requests without breaking regular updates or the offline vendoring workflow described here.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, ruby
Domain
devtools
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.