heroku / heroku/buildpacks-php
Use Dependabot to keep Git submodules up to date
- Dominant language
- Rust
- Stars
- 8
- Forks
- 6
- Avg merge
- 6h 29m
- Merged PRs (30d)
- 7
Description
It turns out that Dependabot supports updating Git submodules:
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem
This could be used to keep these submodules up to date:
https://github.com/heroku/buildpacks-php/blob/main/.gitmodules
Currently they are behind latest, eg:
https://github.com/heroku/buildpacks-php/tree/main/buildpacks/php/tests/fixtures/smoke -> `heroku-php-getting-started @ 752212a`
vs
https://github.com/heroku/php-getting-started/commits/main/
cc @dzuelke
Contributor guide
Research direction
Start with the repository's .gitmodules file and the linked Dependabot package-ecosystem documentation. Check the listed submodules, including heroku-php-getting-started, and determine the required Dependabot configuration. Done means Dependabot can keep those Git submodule references up to date.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- git, github
- Domain
- devops
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100