Hacker News Reader

To be fair to Dependabot, Nix isn't supported, so I'm not sure how the PRs could be right?

That's not my problem. Spamming my project with broken PRs is annoying. Not supporting Nix is not a good enough excuse to spam me.

It shouldn't be automatically sending PRs for nix in the first place, right? Did you enable version updates? You can turn security updates off via https://docs.github.com/en/code-security/dependabot/dependab...

FWIW, I don't think security updates are turned on by default anymore, so new repos won't have this problem.

>It shouldn't be automatically sending PRs for nix in the first place, right?

That's the problem it tried to update dependencies without touching nix which would messed up the build. It assumed it knew how to update it, but did it wrong.

Reply on news.ycombinator.com