devcontainers / devcontainers/cli

Add smoke test against Dependabot integration

Open
#732 0 comments 0 reactions 0 assignees View on GitHub
feature-request
Dominant language
TypeScript
Stars
3k
Forks
457
Avg merge
13h 17m
Merged PRs (30d)
6

Description

Now that the CLI is coupled to the [dependabot integration ](https://containers.dev/guide/dependabot), it would be great to have an automated PR check to confirm changes are compatible. The `devcontainer outdated`, `devcontainer features info`, and `devcontainer upgrade` commands are all utilized in the [dependabot core implementation](https://github.com/dependabot/dependabot-core/pull/8445)

This should be fairly straightforward to create a test for, given that the project is highly containerized. The [dev container ecosystem container](https://github.com/dependabot/dependabot-core/pkgs/container/dependabot-updater-devcontainers) can be rebuilt using the dev build of the CLI:

The dependabot CLI can then be utilized to run a sanity check:

```
LOCAL_GITHUB_ACCESS_TOKEN="$LOCAL_GITHUB_ACCESS_TOKEN" dependabot \
--updater-image ghcr.io/dependabot/dependabot-updater-devcontainers \
update \
devcontainers \
joshspicer/versioning-project-two-configs \
-o /tmp/updates.yaml \
--directory /

updater | +-----------------------------------------------------------------------+
updater | | Changes to Dependabot Pull Requests |
updater | +---------+-------------------------------------------------------------+
updater | | created | ghcr.io/codspace/versioning/foo:1 ( from 1.1.0 to 2.11.1 ) |
updater | | created | ghcr.io/codspace/versioning/baz:1.0 ( from 1.0.0 to 2.0.0 ) |
updater | +---------+-------------------------------------------------------------+
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.