Dependabot non updated dependencies about geocoder HOT 8 CLOSED

My mistake ... Those are not required dependencies but "sub-dependencies" ...

from geocoder.

Even though it would be awesome that @dependabot-bot update also "sub-dependencies" but maybe it's out the scope of @dependabot-bot.

from geocoder.

We'll automatically update sub-dependencies if there a vulnerabilities in them, and have a "secret" option to update them as normal - I can enable it for you if you'd like?

from geocoder.

Oh nice ! Every discovery makes @dependabot-bot even better :P

If you enable it will it be enabled for all my repositories or just for this one ?

from geocoder.

Only this one (or any repos you ask me for).

from geocoder.

I'll take care of it myself then, so it's consistent for all my repositories (I don't want to bother you for every new repository :D).

Any reason to keep that option "secret" and not allowing users to enable this themselves ?

from geocoder.

Just that it's in beta and I wasn't sure if there'd be enough demand to keep it around. There's one person using it at the moment, but I'll remember you want it, too, when I make the call on whether to add it to the UI 🙂.

from geocoder.

Awesome 👍
Thanks for all the good work ! 💪

from geocoder.