Skip to content

Fix uv ecosystem value in dependabot skill #1990

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jmatsuzawa wants to merge 2 commits into
base: staged
Choose a base branch
from
+5 −2
Open

Fix uv ecosystem value in dependabot skill #1990

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d406d14
Fix uv ecosystem value in dependabot skill
jmatsuzawa Jun 12, 2026
65d0ecc
Add note to choose uv or pip for dependabot skill
jmatsuzawa Jun 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions skills/dependabot/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,8 @@ Scan the repository for dependency manifests. Look for:
| Ecosystem | YAML Value | Manifest Files |
|---|---|---|
| npm/pnpm/yarn | `npm` | `package.json`, `package-lock.json`, `pnpm-lock.yaml`, `yarn.lock` |
| pip/pipenv/poetry/uv | `pip` | `requirements.txt`, `Pipfile`, `pyproject.toml`, `setup.py` |
| pip/pipenv/poetry | `pip` | `requirements.txt`, `Pipfile`, `pyproject.toml`, `setup.py` |
| uv | `uv` | `pyproject.toml`, `uv.lock` |
Comment thread
jmatsuzawa marked this conversation as resolved.
Comment thread
jmatsuzawa marked this conversation as resolved.
| Docker | `docker` | `Dockerfile` |
| Docker Compose | `docker-compose` | `docker-compose.yml` |
| GitHub Actions | `github-actions` | `.github/workflows/*.yml` |
Expand All @@ -57,7 +58,9 @@ Scan the repository for dependency manifests. Look for:
| Git Submodules | `gitsubmodule` | `.gitmodules` |
| Pre-commit | `pre-commit` | `.pre-commit-config.yaml` |

Note: pnpm and yarn both use the `npm` ecosystem value.
Notes:
- pnpm and yarn both use the `npm` ecosystem value.
- Prefer `uv` ecosystem value when `uv.lock` is present; otherwise use `pip`.
Comment thread
jmatsuzawa marked this conversation as resolved.

### Step 2: Map Directory Locations

Expand Down
Loading