dependabot / dependabot/dependabot-core
Dependabot limits update entries to 200
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
Dependabot has a limit of 200 entries in the `updates` field.
While enabling Dependabot for a monorepo I have reached this limit.
The reason why I have so many entries in the `updates` field is because Dependabot does not support globs in the directory field (https://github.com/dependabot/dependabot-core/issues/2178), so for each directory in my repo an entry needs to be added.
While I understand that having too many entries might create problems with the GitHub API rate limit, it would be nice to have a workaround this limitation.
Contributor guide
Research direction
Start by reviewing how Dependabot handles the configuration `updates` field and its 200-entry limit. Compare that behavior with the directory and glob limitation described in issue 2178, then clarify and test an agreed workaround for monorepos with many directories.
Written by the indexing model from the issue text.
Assessment
- Domain
- devops
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100