Recursively Check for poms

[blakemorgan]

It would help a lot if Dependabot would recursively search for pom.xml files in Java Maven projects so we don't have to add them all manually. Is that already possible?

[greysteil]

Hey @blakemorgan,

Thanks for giving Dependabot a try. This is on our list, but we don't have it yet. With monorepo setups we generally recommend putting a pom.xml at the room that references all of the child poms - with that there, Dependabot will fetch all of them and create PRs that update a dependency across all of them at once. The alternative of adding lots of update configs manually is kind of painful - it's not only time consuming to do the add, but means you'll get multiple PRs for the same dependency update (one for each project it's doing the update in).

Is adding a root level pom.xml possible?

[greysteil]

(By the way, the full file fetching logic that Dependabot uses for Maven is here.)

[infin8x]

Duplicate of #2178