dependabot / dependabot/dependabot-core

Add support for Rush

Open
#2,270 20 comments 113 reactions 0 assignees View on GitHub
Keep T: new-ecosystem
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

[Rush](https://rushjs.io/) is a opensource monorepo manager (similar to Lerna) and is extensively used to manage large monorepos within Microsoft. It'll be great to see if dependabot-core can support Rush monorepos too!

We are currently using a fork of dependabot-core which we have modified to support Rush and would be happy to contribute the changes back.

Creating this issue to start the conversations and see if other people are also interested.

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by reviewing the Rush documentation and existing support for similar monorepo managers such as Lerna, then compare the reported fork changes with current dependabot-core behavior. Done should include defined tests and a complete Rush monorepo update workflow.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
tooling
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.