Contradiction between doc and schema for Dependabot with pnpm

Question

When configuring Dependabot to use pnpm as package ecosystem, the documentation states that it is currently supported. Though, I get an error in my editor because it does not exist in the schema. What is going on?

Also, Dependabot doesn't seem to understand my configuration file as it wants to create a new one. I assume it might be because of this?

Here is my .github/dependabot.yml file:

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
  - package-ecosystem: "pnpm"
    directory: "/"
    schedule:
      interval: "weekly"

pnpm should be a valid value in the schema as the documentation says.

They don't say `"pnpm"` is a valid value. Per the table in the docs the correct value for pNpm is `package-ecosystem: "npm"`. — jonrsharpe, Aug 29 '23 at 16:14
Oh, I got it now! I just didn't see that `YAML value` column, how stupid! Thank you! — Benjamin, Aug 29 '23 at 16:17
@jonrsharpe yes please, make it a post so I can mark it as the answer, thank you! — Benjamin, Aug 29 '23 at 16:17

score 0 · Accepted Answer · answered Aug 29 '23 at 16:23

pnpm is supported, but note (emphasis mine):

The following table shows, for each package manager:

The YAML value to use in the dependabot.yml file

...

Package manager YAML value Supported versions Private repositories Private registries Vendoring

pnpm npm v7, v8 ✅ ✅ ❌

So you want:

 - package-ecosystem: "npm"

Contradiction between doc and schema for Dependabot with pnpm

1 Answers1