gemini-code-assist[bot] commented on code in PR #38344:
URL: https://github.com/apache/beam/pull/38344#discussion_r3169517505


##########
.github/dependabot.yml:
##########
@@ -23,6 +23,8 @@ updates:
     directory: "/sdks/python" # Location of package manifests
     schedule:
       interval: "daily"
+    exclude-paths:
+    - "/sdks/python/container/**"

Review Comment:
   ![high](https://www.gstatic.com/codereviewagent/high-priority.svg)
   
   According to the [Dependabot 
documentation](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#exclude-paths),
 the patterns in `exclude-paths` are relative to the `directory` specified for 
the ecosystem. Since the `directory` for this block is already set to 
`/sdks/python` (line 23), the exclusion pattern should be relative to that 
path. Using the full path `/sdks/python/container/**` will likely cause 
Dependabot to look for a path relative to the manifest directory, effectively 
searching for `/sdks/python/sdks/python/container/**`, which will not match the 
intended files.
   
   ```yaml
       - "container/**"
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to