How to use dependabot on a nerves project?

Nerves Forum Nerves Questions / Help
, ,
1

Hey there,

Did someone already successfully setup dependabot on a Nerves project?
I have this error message:

Dependabot can't evaluate your Elixir dependency files.
As a result, Dependabot couldn't check whether any of your dependencies are out-of-date.

The error Dependabot encountered was:
** (Mix) Archive "nerves_bootstrap" could not be found. Please make sure the archive is installed locally.
2

no one?
:sob:

3

At the risk of providing a completely ignorant answer since I havenā€™t set up dependabot, can you run the following in the container that runs the dependabot service?

mix archive.install hex nerves_bootstrap

Perhaps here? dependabot-core/Dockerfile at eb93796ce0432dd82a1db73ec5fabb2133885354 Ā· dependabot/dependabot-core Ā· GitHub

2 Likes
4

I would like to run such a command (this is what we do on github actions)
But we donā€™t run dependabot, dependabot runs itself against a github repo

5

I tried sending a PR up with the change.

2 Likes
6

Thank you so much :slight_smile:
I still donā€™t have the reflex of fixing the product myself for this kind of issue. Iā€™ll be watching your PR then!

7

Hey @fhunleth
There is some test case to write before your PR can be merged.
I can do if you want!

8

The PR has now been merged, and dependabot is working just fine with Nerves :ok_hand:
Thank you @fhunleth :pray:

1 Like