Dependabot-core: Support for CircleCI Orbs

[aaronjensen]

CircleCI orbs are versioned and published to a public repository. It'd be great if dependabot could offer automatic upgrades for them as well.

[greysteil]

I'm 👍 on this! We're polishing our existing languages first, but will get to it 🙂

[indreklasn]

+1

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs within seven days. Thank you for your contributions.

[nl-ria]

Oh no StaleBot ! @greysteil Is there any update on this?

[feelepxyz]

@nl-ria no update yet, but adding it as an enhancement we'll consider. Ideally we want to make it easier to run community supported languages/package managers inside Dependabot but this some time way off until we've completed the integration with GitHub.

[infin8x]

Closing this as we don't expect to get to it in the foreseeable future. We're not accepting PRs at the moment due to capacity limitations, but in the future we expect to accept contributions, including those adding CircleCI support in Dependabot Core, as long as they don't damage the maintainability of Dependabot Core.