This is an exercise to check your knowledge on using Dependabot to automatically fix vulnerable dependencies in your repository. It is automatically graded via a workflow once you have completed the instructions.
.github/workflows/grading.yml. You do not need to use this workflow for any purpose and altering its contents will affect the repository's ability to assess your exercise and give feedback.
ℹ️ The use of GitHub Actions also means that it may take the grading workflow a few seconds and sometimes minutes to run.
Please complete the instructions below:
- Create your own copy of this repository by using the Use this template button.
- Use what you have learned to enable Dependabot in this repository.
- Fix the vulnerability by merging the Pull Request opened by Dependabot.
Your exercise is graded automatically once you have completed the instructions. To see the result of your exercise, go to the Actions tab, and see the most recent run on the Grading workflow.
See Viewing workflow run history if you need assistance.
If you are stuck with a step in the exercise or the grading workflow does not automatically run after you complete the instructions, run the troubleshooter: in the Actions tab select the Grading workflow, click Run workflow, select the appropriate branch, and click the Run workflow button.
The troubleshooter will either display useful information to help you understand what you might have done wrong in your exercise or redirect you to the documentation relevant to your exercise to help you out.
See Running a workflow on GitHub if you need assistance.
Use these to help you!
Resources specific to this exercise:
Resources for working with exercises and GitHub Actions in general: