Skip to content

CCM-10553: Update dependabot to pnpm#953

Closed
ScottFullerton-NHSE wants to merge 2 commits into
releasefrom
feature/CCM-10553-fix-dependabot-packages
Closed

CCM-10553: Update dependabot to pnpm#953
ScottFullerton-NHSE wants to merge 2 commits into
releasefrom
feature/CCM-10553-fix-dependabot-packages

Conversation

@ScottFullerton-NHSE
Copy link
Copy Markdown
Contributor

Summary

Updates the package manager dependabot uses to pnpm instead of npm to hopefully fix #115 security issue.

Reviews Required

  • Dev
  • Test
  • Tech Author
  • Product Owner

Checklist

  • Brief description of work completed, and any technical decisions made as part of the PR
  • PR link added as a comment to the relevant JIRA ticket
  • PR link shared on Slack and/or Teams
  • 2 reviews received
  • Tester approval

@github-actions
Copy link
Copy Markdown

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-10553

lapenna-bjss
lapenna-bjss previously approved these changes Jun 12, 2025
@github-actions
Copy link
Copy Markdown

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-10553

Comment thread .github/dependabot.yml
directory: "/"
schedule:
interval: "weekly"
- package-ecosystem: "pnpm"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did we really need to update the indentation?

Copy link
Copy Markdown
Contributor Author

@ScottFullerton-NHSE ScottFullerton-NHSE Jun 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it's my code editor doing it automatically as I didn't change the indentation at all. (Just checked, it's prettier causing it)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants