dependabot-android-gradle

A Proof of Concept repo to test how Dependabot can handle the dependencies from https://maven.google.com

Problem

We wanted to use Dependabot on an Android Gradle project. The problem is that Dependabot is only checking https://repo.maven.apache.org for version updates with the default configuration. However on an Android project needs a lots of dependencies which are provided by Google.

Idea

Configure dependabot to be able to scan for dependencies in https://maven.goolge.com.

Result

Dependabot will check for updates if a maven registry is set up in dependabot.yml:

version: 2
registries:
  maven-google:
    type: maven-repository
    url: https://maven.google.com
    username: ""
    password: ""
updates:
  - package-ecosystem: "gradle"
    directory: "/"
    registries:
      - maven-google
    schedule:
      interval: "daily"
    open-pull-requests-limit: 10