Dependabot-core: Dependabot Java (Gradle) with packages stored on GitHub Package Registry.

[artzag]

Hey,

I was experimenting recently with using GitHub Package Registry for my Java (maven/ gradle) dependencies. I couldn't make Dependabot see those releases though. Do you have any hints how should I set it up? It looks like GitHub Package Registry ignores maven-metadata.xml - even though deployment says it has been uploaded successfully.
I would be grateful for some sort of step-by-step guide / example on how to use Dependabot Java (Gradle) with packages stored on GitHub Package Registry.

Thanks!

[feelepxyz]

@artzag 👋 there's currently no way of giving Dependabot access to private Gradle package registries, it's possible in Maven by providing registry credentials to Dependabot from the dashboard under the account (top right) > Config variables.

You can track this PR for Gradle authenticated repository support: https://github.com/dependabot/dependabot-core/pull/1465

[jurre]

This landed yesterday 🎉

[artzag]

... and is working like a charm! Great work! Thanks!