Kirby repository - add GitHub Dependabot for security updates of dependencies?

Kirby 3 Solved ✅
1

Hello,

I think this is something for you @lukasbestle @bastianallgeier. Some time ago you enabled the ‘Security’ tab of the Kirby 3 GitHub repository. I think another improvement would be to add the GitHub Dependabot to get automatic notifications about security updates for dependencies which Kirby 3 relies on. What do you think?

For reference, see this:

https://help.github.com/en/github/managing-security-vulnerabilities/viewing-and-updating-vulnerable-dependencies-in-your-repository

I created no GItHub issue because I’m not sure it belongs there.

Best Regards,

2

We have already enabled Dependabot alerts. :slight_smile:

Bildschirmfoto 2020-06-28 um 14.13.32
Bildschirmfoto 2020-06-28 um 14.13.321878×1394 273 KB

1 Like
3

Glad to hear and it’s interesting to know. I remember how I was able to see these notifications or information on other repositories and saw nothing on this GitHub repository so I thought it was disabled. I didn’t know you can hide them from other ppl. Thank you for the information!

4

You can’t disable them for other people, you have to explicitly enable them for each user or GitHub team.