Add conda and deno to packageManagerLookup#619
Merged
Conversation
Agent-Logs-Url: https://github.com/dependabot/cli/sessions/1ead6a5b-9d1a-47f2-a42c-51e060cee1e3 Co-authored-by: kbukum1 <171620528+kbukum1@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Add conda and deno to package manager lookup table
Add conda and deno to packageManagerLookup
May 7, 2026
kbukum1
approved these changes
May 7, 2026
AbhishekBhaskar
approved these changes
May 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
condaanddenoare validdependabot-coreecosystems with published updater images (ghcr.io/dependabot/dependabot-updater-conda/deno) but were absent frompackageManagerLookup, causingsetImageNamesto returnunknown package managerfor any job targeting either ecosystem.Changes
internal/infra/run.go: Add"conda": "conda"and"deno": "deno"topackageManagerLookupin alphabetical order (betweencomposeranddevcontainers)internal/infra/run_test.go: AddTest_setImageNamescovering both new ecosystems and the unknown-manager error pathWarning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
172.20.0.1REDACTED, pid is -1(packet block)If you need me to access, download, or install something from one of these locations, you can either:
Original prompt
Summary
Add
condaanddenoto the package manager lookup table independabot-cliso that jobs targeting these ecosystems can resolve their updater image. Both ecosystems are registered independabot/dependabot-core(require "dependabot/conda"andrequire "dependabot/deno") and have updater images published atghcr.io/dependabot/dependabot-updater-condaandghcr.io/dependabot/dependabot-updater-deno, but they are not in this CLI's lookup map.Why
The
packageManagerLookupmap ininternal/infra/run.gois whatsetImageNamesuses to translatejob.PackageManagerinto the updater image suffix. Anything not in this map causes:After comparing against the full ecosystem list in
dependabot-core, the only ecosystems missing frompackageManagerLookuparecondaanddeno. (nixis already present.)What to change
Update
packageManagerLookupininternal/infra/run.go(around the existing block with entries like"bazel": "bazel","bun": "bun","nix": "nix", etc.). Add the two missing entries while preserving the existing alphabetical ordering:(Confirm the upstream image suffix matches the key — for
dependabot-coreecosystems that share a name with the publishedghcr.io/dependabot/dependabot-updater-<suffix>image, this is a 1:1 mapping just likebun,cargo,nix, etc.)Search the rest of the repo for ecosystem enumerations that may also need updating. In particular check:
packageManagerLookup/setImageNames(e.g.internal/infra/*_test.go) — add coverage forcondaanddeno.testdata/if they enumerate package managers.Update them to include
condaanddenowhere relevant. If an enumeration is purely illustrative, no change is required — call this out in the PR body.Add or extend a unit test verifying that
setImageNamesresolves the correct image forcondaanddenojobs (e.g.ghcr.io/dependabot/dependabot-updater-condaandghcr.io/dependabot/dependabot-updater-deno). Follow the existing test style in the same package.Required validation steps
Run the project's standard Go checks and ensure they pass:
If the repo has a
Makefilewithmake test/make lint, prefer those targets.Acceptance criteria
packageManagerLookupininternal/infra/run.gocontains"conda": "conda"and"deno": "deno", placed in the existing alphabetical position.gofmt,go vet, andgo test ./...all pass.High-level PR description (use this in the PR body)
The following is the prior conversation context from the user's chat exploration (may be truncated):
User: Create proper PR on
dependabot-actionsusing the project PR template and adding high level explanation in the PR for the for missing package managers. After comparison, I see that conda and deno seems to be missing. You can evaluate properly. I am sharing the full list from dependabot-corerequire "dependabot/bazel"
require "dependabot/bun"
require "dependabot/bundler"
require "dependabot/cargo"
require "dependabot/composer"
require "dependabot/conda"
require "dependabot/deno"
require "dependabot/devcontainers"
require "dependabot/docker"
require "dependabot/docker_compose"
require "dependabot/dotnet_sdk"
require "dependabot/elm"
require "dependabot/github_actions"
require "dependabot/git_submodules"
require "dependabot/go_modules"
require "dependabot/gradle"
require "dependabot/helm"
require "dependabot/hex"
require "dependabot/julia"
require "dependabot/maven"
require "dependabot/nix"
require "dependabot/npm_and_yarn"
require "dependabot/nuget"
require "dependabot/opentofu"
require "dependabot/pre_commit"
require "dependabot/pub"
require "dependabot/pytho...
This pull request was created from Copilot chat.