Dependabot can now update repositories that use RubyGems, use bundler
, and vendor their gems by committing the vendor/cache
folder to the repo. In your Dependabot configuration file, add a vendor: true
option:
version: 2
updates:
- package-ecosystem: "bundler"
directory: "/"
schedule:
interval: "daily"
vendor: true
If you'd like Dependabot to support vendored packages from other package ecosystems, vote for the corresponding feature request on the dependabot/dependabot-core
repository.