Skip to content

Commit 4b5576a

Browse files
📖 [Docs]: Use "lockfile" per textlint terminology rule
1 parent 12d386f commit 4b5576a

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎src/docs/Solutions/Infusing-GitHub-with-PowerShell.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ GitHub's language-aware features assume a mainstream package ecosystem. Where Po
5252

5353
### Dependency updates — Dependabot
5454

55-
[Dependabot](https://docs.github.com/en/code-security/dependabot) keeps dependencies current for npm, pip, NuGet, Cargo, Go modules, Maven, Composer, and [many more](https://docs.github.com/en/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories) — but it **does not recognize PowerShell's native package management**. Although modules are distributed as NuGet packages on the PowerShell Gallery, the `nuget` ecosystem only understands .NET project files; it does not read a module manifest's `RequiredModules`, `#Requires -Module` statements, or a [PSResourceGet](https://learn.microsoft.com/en-us/powershell/module/microsoftpowershell.psresourceget/) lock file.
55+
[Dependabot](https://docs.github.com/en/code-security/dependabot) keeps dependencies current for npm, pip, NuGet, Cargo, Go modules, Maven, Composer, and [many more](https://docs.github.com/en/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories) — but it **does not recognize PowerShell's native package management**. Although modules are distributed as NuGet packages on the PowerShell Gallery, the `nuget` ecosystem only understands .NET project files; it does not read a module manifest's `RequiredModules`, `#Requires -Module` statements, or a [PSResourceGet](https://learn.microsoft.com/en-us/powershell/module/microsoftpowershell.psresourceget/) lockfile.
5656

5757
We already benefit from Dependabot for the `github-actions` ecosystem (keeping SHA-pinned action references current). The gap is **PowerShell module dependencies themselves**: they are invisible to Dependabot today. The ask is a native `powershell`/`psgallery` ecosystem; the interim is a manifest-aware updater that opens the same kind of pull request.
5858

0 commit comments

Comments
 (0)