Dependabot-core: Add support for updating gradle wrapper

Created on 30 Oct 2018  路  12Comments  路  Source: dependabot/dependabot-core

Hi!

This is an amazing way to manage dependencies.

It would be awesome if it could also send PRs for gradle wrapper updates.
Typically this involves

  1. Find the latest version of gradle published at
https://api.github.com/repos/gradle/gradle/releases/latest
  1. Run
./gradlew wrapper --gradle-version ${VERSION} --distribution-type all
  1. Send a PR.

Some projects using maven also use a wrapper - https://github.com/takari/maven-wrapper but that can be a separate issue.

language-support Lgradle feature-request new-ecosystem

Most helpful comment

Thanks for the kind words @rahulsom!

Looking through these docs it does look like it would be pretty straightforward for Dependabot to update Gradle wrapper versions. I'm not going to add it straight away (I'm swamped with a few other updates) but I'll leave this open and come back to it.

All 12 comments

Thanks for the kind words @rahulsom!

Looking through these docs it does look like it would be pretty straightforward for Dependabot to update Gradle wrapper versions. I'm not going to add it straight away (I'm swamped with a few other updates) but I'll leave this open and come back to it.

This would be awesome!

Hi @greysteil! Any chance to prioritize this?

At the moment I'm afraid we have more than we can handle just integrating with GitHub. We'd love to get to this, but unless it's an open source contribution it's going to take some time.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs within seven days. Thank you for your contributions.

Poke

@greysteil do you have pointers where and how it needs to be implemented? I could take a look into it.

@feelepxyz maybe you have some pointers?

Any progress on this?

@infin8x do you have some pointers where this needs to be implemented, I would still take a look

@robstoll I don't at the moment, sorry. We're a bit swamped at the moment and can't commit to giving your PR the requisite attention.

@infin8x I don't need a commitment, just a pointer where I should start looking. There is a lot of code and I don't have time either, so if I spend time helping you out then I want to do it as efficiently as possible. I think it would be enough, if you can point me to the file where the analysis for updates takes place. Thanks in advance

Was this page helpful?
0 / 5 - 0 ratings