Dependabot-core: Swift Package Manager Support?

[satishbabariya]

Is there any plans for spm support?, some of the following details may help

1. use Package.swift in file_fetcher
2. use .package(url: "https://github.com/abc/abc.git", from: "1.0.0) for dependency in file_parser

Listing Dependency using Command Line (exec)

swift package dump-package --type json

For Package Metadata

swift package describe --type json

1. use git tag for checking new version update

I don't know much ruby, but I can help in creating specific dependency updater for package file.

[greysteil]

We'd love to add spm support. Are there any docs and/or example Package.swift files you can link to?

[satishbabariya]

here is the documentation on spm https://github.com/apple/swift-package-manager/tree/master/Documentation

and here is the example of package file https://github.com/vapor/vapor/blob/master/Package.swift

[satishbabariya]

also here is the dockerfile for test or developement in case

FROM ubuntu:18.04

RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true && apt-get -q update && \
    apt-get -q install -y \
    libatomic1 \
    libbsd0 \
    libcurl4 \
    libxml2 \
    tzdata \
    && rm -r /var/lib/apt/lists/*

ARG SWIFT_PLATFORM=ubuntu18.04
ARG SWIFT_BRANCH=swift-5.0.1-release
ARG SWIFT_VERSION=swift-5.0.1-RELEASE

ENV SWIFT_PLATFORM=$SWIFT_PLATFORM \
    SWIFT_BRANCH=$SWIFT_BRANCH \
    SWIFT_VERSION=$SWIFT_VERSION

RUN SWIFT_URL=https://swift.org/builds/$SWIFT_BRANCH/$(echo "$SWIFT_PLATFORM" | tr -d .)/$SWIFT_VERSION/$SWIFT_VERSION-$SWIFT_PLATFORM.tar.gz \
    && curl -fSsL $SWIFT_URL -o swift.tar.gz \
    && export GNUPGHOME="$(mktemp -d)" \
    && tar -xzf swift.tar.gz --directory / --strip-components=1 \
    && rm -r "$GNUPGHOME" swift.tar.gz \
    && chmod -R o+r /usr/lib/swift

# Print Installed Swift Version
RUN swift --version

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs within seven days. Thank you for your contributions.

[orj]

Gonna add my voice to those calling for Swift Package Manager support in Dependabot.