dependabot / dependabot/dependabot-core

Add support for Hugo modules

Open
#6,860 3 comments 16 reactions 0 assignees View on GitHub
T: feature-request T: new-ecosystem
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

Hi, is it possible to add support for [Hugo modules](https://gohugo.io/hugo-modules/use-modules/#prerequisite), which base on Golang Modules?

I set up the Dependabot on my repo with `gomod`, but found that `go.mod` and `go.sum` will be emptied.

Related Config:

```yaml
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "daily"

- package-ecosystem: "gomod"
directory: "/modules/blog"
schedule:
interval: "daily"

- package-ecosystem: "gomod"
directory: "/modules/meta/recommended"
schedule:
interval: "daily"
allow:
- dependency-type: "all"
```

Related PRs:

- https://github.com/razonyang/hb/pull/208/files
- https://github.com/razonyang/hb/pull/209/files
- https://github.com/razonyang/hb/pull/210/files

Is there a way to replace the `go get` and `go mod tidy` with `hugo mod get` and `hugo mod tidy` respectively?

Contributor guide

Open the contributing guide

Research direction

Start by comparing the existing gomod handling for go.mod and go.sum with Hugo's module prerequisites and the requested hugo mod get and hugo mod tidy commands. Use the supplied Dependabot configuration and related PRs as reproduction material; done means Hugo module files are preserved and updated without being emptied.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, hugo
Domain
tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.