Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for Docker compose files #390

Open
greysteil opened this issue Apr 27, 2018 · 41 comments · May be fixed by #1862
Open

Support for Docker compose files #390

greysteil opened this issue Apr 27, 2018 · 41 comments · May be fixed by #1862
Assignees
Labels
Keep Exempt this from being marked by stalebot L: docker Docker containers T: new-ecosystem Requests for new ecosystems/languages

Comments

@greysteil
Copy link
Contributor

From @armin-joellenbeck on December 23, 2017 9:21

Knowing when new Docker images are published would be helpful when the are used in a Docker compose file too.

Just like #20, with the file docker-compose.yml instead of Dockerfile.

Copied from original issue: dependabot/feedback#66

@greysteil
Copy link
Contributor Author

👍 for this, and should be relatively straightforward. A couple of things I want to get to first, but I'm definitely game for adding this to Dependabot at some point!

@victorcerutti
Copy link

Hi,
This would be a really good addition, is this still going to happen someday ?

Thanks in advance

@greysteil
Copy link
Contributor Author

I hope so, yes! This is another one that @hmarr owns on our side, but he's very busy scaling Dependabot up to 100m repos!

toolmantim added a commit to buildkite/agent that referenced this issue Jun 7, 2019
It currently can't SHA-pin the docker-compose.yml `image` keys, so can't help us achieve reproducible builds (dependabot/dependabot-core#390)
@stale stale bot added the wontfix label Oct 23, 2019
@bkaid
Copy link

bkaid commented Oct 23, 2019

@stalebot please leave this open - hoping it gets implemented

@stale stale bot removed the wontfix label Oct 23, 2019
@feelepxyz feelepxyz added the T: feature-request Requests for new features label Oct 23, 2019
pedropombeiro pushed a commit to pedropombeiro/dependabot-core that referenced this issue Nov 5, 2019
@njfamirm
Copy link

njfamirm commented Dec 25, 2023

@alimd, I recommend reading through all of the above comments for a few different workarounds. My comment above is, in my opinion, a fairly robust workaround: #390 (comment)

Thanks, @banesullivan. This can work as a temporary solution.

@njfamirm
Copy link

Here's a pointer to the Renovate code that could jump-start a Developer in to making this work on Dependabot.

@mountainash Thank you, but we currently use Dependabot. Switching to another tool would involve a time investment.

@njfamirm
Copy link

👍 for this, and should be relatively straightforward. A couple of things I want to get to first, but I'm definitely game for adding this to Dependabot at some point!

@greysteil is any plan for support this? or use another tool?

@greysteil
Copy link
Contributor Author

Not sure - I haven't worked on Dependabot for a few years now. @jeffwidman might know?

@jeffwidman
Copy link
Member

Unfortunately I'm also no longer on the Dependabot maintainer team so have no additional insight into this.

@kevinquillen
Copy link

The only solution for me was just using Renovate for everything, either self hosted or as the free GitHub App.

@marchershey
Copy link

So I'm guessing we're all jumping ship and boarding Renovate? :P

@PythonCoderAS
Copy link

Is this still planned?

@aaiezza
Copy link

aaiezza commented Dec 18, 2024

Would definitely love this!
I have the PR ready to go 🙂

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "daily"

  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "weekly"

  - package-ecosystem: "docker-compose"
    directory: "/"
    schedule:
      interval: "weekly"

  - package-ecosystem: "docker"
    directory: "/kubernetes/"
    schedule:
      interval: "weekly"

  - package-ecosystem: "docker"
    directory: "/postman/"
    schedule:
      interval: "weekly"

aaiezza added a commit to aaiezza/customer-management-api that referenced this issue Dec 19, 2024
aaiezza added a commit to aaiezza/customer-management-api that referenced this issue Dec 19, 2024
@abdulapopoola
Copy link
Member

Hello everyone,

I apologize for the lack of engagement and have some good news to share. Working on docker-compose is on our roadmap for this quarter (Jan - Mar, 2025). We're still finetuning our plans and hope to eventually publish a public roadmap to make this easier.

Thanks for all the help and support!

@abdulapopoola
Copy link
Member

Another update, we expect work to start on this in February. @robaiken will be the developer driving this 😄

@robaiken robaiken self-assigned this Feb 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Keep Exempt this from being marked by stalebot L: docker Docker containers T: new-ecosystem Requests for new ecosystems/languages
Projects
Status: Planned