Do you use the bun package manager and dependabot?
If so, you might want to try the experimental support for bun in dependabot.
Add `enable-beta-ecosystems: true` to your `dependabot.yml` and add the `npm` package ecosystem. You can see an example below.
Let me know if you try this!
@bcomnes Dependabot on standard GitHub-hosted runners (the default) does not count towards GitHub Actions minutes – meaning that using Dependabot continues to be free for everyone 😀
Are you passionate about multidirectory configuration in the dependabot.yml? What do you think should happen when directories overlap? Let us know in the poll! https://t.co/EbZxJ3d4lt
Five years ago today, we were at GitHub Satellite Berlin announcing that GitHub acquired @dependabot . In the time since, Dependabot has helped secure the software supply chain for millions of developers across the world by creating automatic fixes for vulnerable dependencies.
Really excited to have had the support of the rest of the Dependabot PM team to get this change over the line! It was a long time coming.
https://t.co/gOvX60QuAV
You can now run Dependabot as a GitHub Actions workflow! 🌟 Read more about the benefits this unlocks, including self-hosted runner support. https://t.co/1471r5fv4b