5 ms·

To be fair to Dependabot, Nix isn't supported, so I'm not sure how the PRs could be right?

• charcircuit 4y ago
  That's not my problem. Spamming my project with broken PRs is annoying. Not supporting Nix is not a good enough excuse to spam me.
  • asciimike 4y ago
    It shouldn't be automatically sending PRs for nix in the first place, right? Did you enable version updates? You can turn security updates off via https://docs.github.com/en/code-security/dependabot/dependabot-alerts/configuring-dependabot-alerts https://docs.github.com/en/code-security/dependabot/dependab... FWIW, I don't think security updates are turned on by default anymore, so new repos won't have this problem.
    • charcircuit 4y ago
      >It shouldn't be automatically sending PRs for nix in the first place, right? That's the problem it tried to update dependencies without touching nix which would messed up the build. It assumed it knew how to update it, but did it wrong.