dependabot / dependabot/dependabot-core
Provide api access for equivalent of :GITHUB_SERVER_URL/:OWNER/:REPO/network/updates
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
#3080 asked for a way to bump dependencies.
I'd just like to get access to all of the dependency update logs for my org. -- I hit a bug https://support.github.com/ticket/personal/0/1879837 and it seems the best thing I could do would be to poll all of my org's repositories for the /network/updates to get a list of updates, and then retrieve the equivalent of /network/updates/{id} to get access to a log.
Ideally the /network/updates endpoint should provide json:
```json
[
{
"ecosystem": "pip",
"files": [ "path/...", ... ],
"lastChecked": date (value filled in),
"status": "FAILURE..." (possibly distinguishing various failures)
"id": number
"url": ":GITHUB_API_URL/repos/:owner/:repo/network/updates/:id" (values filled in...)
},
{
"ecosystem": "github-actions",
"files": [ ".github/workflows/...", ... ],
"lastChecked": date,
"status": "SUCCESS"
},
...
]
```
the /network/updates/:id endpoint should have:
```json
{
"id": self_ref_id,
"logsUrl": ...
"status": ...
"pulls": [
{
"url": ":GITHUB_API_URL/repos/:owner/:repo/pulls/:pr" -- for each PR touched by this run,
"status": "created|unchanged|updated|rebased|conflicted..."
},
...
]
}
```
`logsUrl` should link to an access restricted url containing something that probably starts like:
```
proxy | time="2022-11-14T..:..:..Z" level=info msg="proxy starting" commit=...
```
Contributor guide
Research direction
Start by reviewing the requested /network/updates and /network/updates/:id endpoint shapes, including the dependency ecosystems, statuses, pull references, and logsUrl. Done means callers can retrieve update summaries, per-update details, and access-restricted logs through the API as described.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- api
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100