dependabot / dependabot/dependabot-core

Provide api access for equivalent of :GITHUB_SERVER_URL/:OWNER/:REPO/network/updates

Open
#6,148 4 comments 10 reactions 0 assignees View on GitHub
E: api-support T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

#3080 asked for a way to bump dependencies.

I'd just like to get access to all of the dependency update logs for my org. -- I hit a bug https://support.github.com/ticket/personal/0/1879837 and it seems the best thing I could do would be to poll all of my org's repositories for the /network/updates to get a list of updates, and then retrieve the equivalent of /network/updates/{id} to get access to a log.

Ideally the /network/updates endpoint should provide json:
```json
[
{
"ecosystem": "pip",
"files": [ "path/...", ... ],
"lastChecked": date (value filled in),
"status": "FAILURE..." (possibly distinguishing various failures)
"id": number
"url": ":GITHUB_API_URL/repos/:owner/:repo/network/updates/:id" (values filled in...)
},
{
"ecosystem": "github-actions",
"files": [ ".github/workflows/...", ... ],
"lastChecked": date,
"status": "SUCCESS"
},
...
]
```

the /network/updates/:id endpoint should have:

```json
{
"id": self_ref_id,
"logsUrl": ...
"status": ...
"pulls": [
{
"url": ":GITHUB_API_URL/repos/:owner/:repo/pulls/:pr" -- for each PR touched by this run,
"status": "created|unchanged|updated|rebased|conflicted..."
},
...
]
}
```

`logsUrl` should link to an access restricted url containing something that probably starts like:
```
proxy | time="2022-11-14T..:..:..Z" level=info msg="proxy starting" commit=...
```

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the requested /network/updates and /network/updates/:id endpoint shapes, including the dependency ecosystems, statuses, pull references, and logsUrl. Done means callers can retrieve update summaries, per-update details, and access-restricted logs through the API as described.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
api
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.