Dependabot supports vendoring for Ruby/bundler

Dependabot can now update repositories that use RubyGems, use bundler, and vendor their gems by committing the vendor/cache folder to the repo. In your Dependabot configuration file, add a vendor: true option:

version: 2
updates:
  - package-ecosystem: "bundler"
    directory: "/"
    schedule:
      interval: "daily"
    vendor: true

If you'd like Dependabot to support vendored packages from other package ecosystems, vote for the corresponding feature request on the dependabot/dependabot-core repository.

GitHub CLI is out of beta and now generally available for all GitHub users. GitHub CLI brings GitHub to your terminal to reduce context switching and enable you to create even more workflows. To download for Windows, macOS, or Linux visit cli.github.com for instructions.

With GitHub CLI 1.0, you can:

  • Run your entire GitHub workflow from the terminal, from issues through releases.
  • Call the GitHub API to script nearly any action, and set a custom alias for any command.
  • Connect to GitHub Enterprise Server in addition to GitHub.com.

View the full list of new features and bug fixes in the release notes.

Learn more about GitHub CLI

See more