Dependabot-core: Support Paket for dotnet project

[vbshift]

Do you plan to support Paket for dotnet project ?

Thank

[greysteil]

Yes! It's not on our immediate roadmap, but we definitely want to add support in future. I'm going to keep this open so others can watch it for updates, and add their voice to adding support.

[haf]

Since paket is a more mature way of handling dependencies for .net projects, having dependabot read paket.lock from the root would be really great!

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs within seven days. Thank you for your contributions.

[haf]

adfasdff

[tforkmann]

Any news on that?

[jurre]

We've paused accepting new ecosystems into dependabot-core for now, we've described some of our reasoning here: https://github.com/dependabot/dependabot-core/blob/main/CONTRIBUTING.md#contributing-new-ecosystems. So this is not something that will land in the near future unfortunately.

[cdrnet]

Paket is not really a separate ecosystem, it's really NuGet and NuGet packages - it's just a different client and different files that need to be updated. Thanks to the explicit solution level lock files, the implementation could even be simpler for Paket than with raw nuget, for both monitoring and pull requests.