Skip to content

Comments

Add multiple directories to dependabot config#581

Open
alessio wants to merge 1 commit intomainfrom
alessio-patch-1
Open

Add multiple directories to dependabot config#581
alessio wants to merge 1 commit intomainfrom
alessio-patch-1

Conversation

@alessio
Copy link
Contributor

@alessio alessio commented Feb 23, 2026

Updated dependabot configuration to monitor multiple directories for npm packages.

Summary by CodeRabbit

  • Chores
    • Expanded dependency management configuration to monitor multiple project directories, improving coverage of dependency tracking and updates across the codebase.

Updated dependabot configuration to monitor multiple directories for npm packages.
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @alessio, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly enhances the repository's dependency management by expanding Dependabot's monitoring capabilities. By configuring Dependabot to scan multiple npm package directories, it ensures that a broader range of project components will receive timely dependency updates, improving overall security and maintainability.

Highlights

  • Dependabot Configuration: The Dependabot configuration has been updated to monitor multiple directories for npm packages, moving from a single directory entry to a directories list.
  • Expanded Monitoring Scope: Dependabot will now check for updates in /sdk/ts, /erc7824-docs, /sdk/compat, /test/integration, and /sdk/ts/examples/*app*.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog
  • .github/dependabot.yml
    • Replaced the single directory key with a directories list.
    • Added multiple paths to the directories list for npm package monitoring.
Activity
  • No human activity has occurred on this pull request yet.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@codecov
Copy link

codecov bot commented Feb 23, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

The pull request updates the Dependabot configuration to monitor multiple directories for npm packages. This is a good improvement for ensuring all relevant package dependencies are kept up-to-date. However, there is a duplicate entry in the directories list that should be removed for clarity and efficiency.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Feb 23, 2026

📝 Walkthrough

Walkthrough

Updated Dependabot configuration to expand npm dependency scanning from a single directory (/sdk/ts) to multiple directories including /erc7824-docs, /sdk/compat, /test/integration, and /sdk/ts/examples/*app* directories.

Changes

Cohort / File(s) Summary
Dependabot Configuration
.github/dependabot.yml
Changed npm updates from single directory entry to directories list, expanding dependency monitoring across six paths including documentation, compatibility, and integration test directories.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

  • dimast-x
  • nksazonov
  • philanton

Poem

🐰 Hop, hop, hooray! Dependencies now spread wide,
From docs to tests, no package shall hide,
Multiple paths in Dependabot's care,
Updates will flow everywhere! 📦✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'Add multiple directories to dependabot config' directly and accurately summarizes the main change: expanding Dependabot monitoring from a single directory to multiple directories.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch alessio-patch-1

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@alessio alessio marked this pull request as ready for review February 23, 2026 16:44
@alessio alessio requested a review from a team as a code owner February 23, 2026 16:44
Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/dependabot.yml:
- Line 14: Remove the duplicate "/sdk/ts" entry from the dependabot updates list
so each directory value is unique; locate the update block containing "/sdk/ts"
and delete the redundant instance (keeping a single "/sdk/ts" entry) to satisfy
Dependabot's unique-values requirement.

ℹ️ Review info

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 9c8cc27 and 0ab71af.

📒 Files selected for processing (1)
  • .github/dependabot.yml

- "/erc7824-docs"
- "/sdk/compat"
- "/test/integration"
- "/sdk/ts"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Remove the duplicate /sdk/ts entry.

/sdk/ts is already listed on line 10. The Dependabot docs require that "all values are unique and there is no overlap in directories defined" within a single update block. The duplicate may cause a config validation error or result in redundant update PRs.

🔧 Proposed fix
     directories:
       - "/sdk/ts"
       - "/erc7824-docs"
       - "/sdk/compat"
       - "/test/integration"
-      - "/sdk/ts"
       - "/sdk/ts/examples/*app*"
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- "/sdk/ts"
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In @.github/dependabot.yml at line 14, Remove the duplicate "/sdk/ts" entry from
the dependabot updates list so each directory value is unique; locate the update
block containing "/sdk/ts" and delete the redundant instance (keeping a single
"/sdk/ts" entry) to satisfy Dependabot's unique-values requirement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant