Add dependabot for Gradle dependencies#5440
Conversation
.github/dependabot.yml
Outdated
| - package-ecosystem: "gradle" | ||
| directory: "/packages/flutter_plugin_android_lifecycle/example/android/app" | ||
| schedule: | ||
| interval: "weekly" |
There was a problem hiding this comment.
FWIW, I'd suggest making the interval daily, just to spread out the dependabot PRs
stuartmorgan-g
left a comment
There was a problem hiding this comment.
Nice!
Should we put a commit-message entry to do the [plugin_name] prefix?
.github/dependabot.yml
Outdated
| version: 2 | ||
| updates: | ||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/flutter_plugin_android_lifecycle/example/android/app" |
There was a problem hiding this comment.
Will checking the examples transitively check and update the plugin dependencies themselves?
There was a problem hiding this comment.
I don't think so. It's not very smart from what I can tell
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/webview_flutter/webview_flutter/example/android/app" |
There was a problem hiding this comment.
We should order this file alphabetically by directory so we can easily see what's there.
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/webview_flutter/webview_flutter/example/android/app" |
There was a problem hiding this comment.
Speaking of which, the _android package is missing here.
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/connectivity/connectivity/example/android/app" |
There was a problem hiding this comment.
This plugin doesn't exist any more.
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/video_player/video_player_android/example/android/app" |
There was a problem hiding this comment.
The app-facing package is missing.
With only a couple of exceptions, there should be two examples for every plugin.
.github/dependabot.yml
Outdated
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/espresso/example/android/app" |
There was a problem hiding this comment.
This is a duplicate entry.
stuartmorgan-g
left a comment
There was a problem hiding this comment.
LGTM with more added. I'm not sure I caught everything though.
Given that this is fiddly to get right, and will silently get out of sync with changes (e.g., federating the last couple of plugins), I think I should make tooling that verifies dependabot coverage. It'll be useful when we enable Dart dependabot too.
I'll file an issue for that. (Doesn't need to block yours though).
| schedule: | ||
| interval: "daily" | ||
| open-pull-requests-limit: 10 | ||
|
|
There was a problem hiding this comment.
The app-facing package's example is missing.
There was a problem hiding this comment.
url_launcher doesn't have an app-facing package. https://github.com/flutter/plugins/tree/main/packages/url_launcher/url_launcher
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/path_provider/path_provider_android/example/android/app" |
There was a problem hiding this comment.
The plugin is missing.
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/image_picker/image_picker/example/android/app" |
There was a problem hiding this comment.
This is missing both parts of the implementation package.
| open-pull-requests-limit: 10 | ||
|
|
||
| - package-ecosystem: "gradle" | ||
| directory: "/packages/espresso/example/android/app" |
There was a problem hiding this comment.
The plugin is missing.
|
This has failed in master with the following: Your .github/dependabot.yml contained invalid detailsDependabot encountered the following error when parsing your .github/dependabot.yml: Please update the config file to conform with Dependabot's specification. For more info on the config file format, see the config file documentation |
|
Cool way of regexing the baddies: prefix: "\[[^\]]{14,}\]" |
Adds dependabot for Gradle dependencies.
Unfortunately, dependabot doesn't support globs patterns in directory.
cc @stuartmorgan