heroku / heroku/buildpacks-php

Use Dependabot to keep Git submodules up to date

Open
#54 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
8
Forks
6
Avg merge
6h 29m
Merged PRs (30d)
7

Description

It turns out that Dependabot supports updating Git submodules:
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem

This could be used to keep these submodules up to date:
https://github.com/heroku/buildpacks-php/blob/main/.gitmodules

Currently they are behind latest, eg:
https://github.com/heroku/buildpacks-php/tree/main/buildpacks/php/tests/fixtures/smoke -> `heroku-php-getting-started @ 752212a`
vs
https://github.com/heroku/php-getting-started/commits/main/

cc @dzuelke

Contributor guide

Open the contributing guide

Research direction

Start with the repository's .gitmodules file and the linked Dependabot package-ecosystem documentation. Check the listed submodules, including heroku-php-getting-started, and determine the required Dependabot configuration. Done means Dependabot can keep those Git submodule references up to date.

Written by the indexing model from the issue text.

Assessment

Tech stack
git, github
Domain
devops
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.