dotnet / dotnet/source-build

Recommend source-build compatible dependabot pattern

Open
#2,933 2 comments 0 reactions 0 assignees View on GitHub
area-arcade
Dominant language
No language data
Stars
287
Forks
145
Avg merge
1d 22h
Merged PRs (30d)
10

Description

Some .NET repos (e.g. [templating](https://github.com/dotnet/templating/blob/main/eng/dependabot/Packages.props) and [msbuild](https://github.com/dotnet/msbuild/blob/main/eng/dependabot/Packages.props)) have taken a dependency on utilizing dependabot to update dependencies. The standard pattern is not compatible w/source-build because the dependent package versions gets hard-coded and not overridable by source-build.

Investigation should be done to see if version properties can be utilized that source-build can override. Regardless on the finding repo follow-up needs to be done to update/recommend against the existing patterns being used. Source-build documentation should also be created that captures the recommendation.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.