pitch-io/Dependabot for Clojure projects
Run Dependabot as GitHub Action workflow in your Clojure projects.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| auto_pull_request | Create auto pull-requests when updates for primary dependencies are available. | no | true |
| directory | Directory relative to the workspace root that will be scanned. | no | "" |
| ignore_dependencies | Dependencies to ignore when reporting outdated dependencies or when making pull requests. Comma separated list where each item itself is of the following form: <group_id>:<artifact_id>:<version> The :<version> may be omitted in which case any matching version will be ignored. | no | "" |
| include_subdirectories | Scan for clojure projects in subdirectories | no | true |
| labels | Add labels to the pull-requests. Separate items by comma. | no | "" |
| local_dependencies | Maven JARs to install to the local repository cache. Comma separated list where each item itself is of the form: <relative_path>:<group_id>:<artifact_id>:<version>:<packaging> | no | "" |
| main_branch | The branch into which you want your code merged. | no | main |
| reviewers | Add reviewers to the pull-requests. Separate items by comma. | no | "" |
| security_updates_only | List and update only vulnerable packages, not outdated ones. | no | true |
| severity | Minimum severity to report/update. Values: low, medium, high, critical. | no | low |
Outputs
no outputs