How do I test dependabot before merging config

Question

Is there a way to test that dependabot is working as expected before merging it to my repo?

I work on a pretty large team and I want to make sure I can test the functionality before merging. I have a branch created with a PR open to our develop branch. Is there a way to make sure the PR to update the dependencies is created and the reviewers I have set are added?

user_791609 · Answer

You can use this validator to lint your config file (https://dependabot.com/docs/config-file/validator/), it works for the v2 yaml config as well (I just tested).

user_3442232 · Answer

Solutions that previously worked include:

The GitHub action https://github.com/marocchino/validate-dependabot
A GitHub solution previously located at https://dependabot.com/docs/config-file/validator/

Both are currently not working:

GitHub says they are working on the issue at https://github.com/dependabot/dependabot-core/issues/4605
The validate-dependabot issue is tracked at https://github.com/marocchino/validate-dependabot/issues/233

How do I test dependabot before merging config

2 Answers