ころむにー

<p>Flutterに対してdependabotが全然PR作ってくれないと思ってたんだけど、どうやら更新戦略がデフォルトだとバージョンの上限成約だけを上げて実際に使うバージョン指定は変えない( <code>widen</code> )指定になるからだったみたい</p>
<p><span class="embed-block zenn-embedded zenn-embedded-card"><iframe id="zenn-embedded__80a63ff503f04" src="https://embed.zenn.studio/card#zenn-embedded__80a63ff503f04" data-content="https%3A%2F%2Fgithub.com%2Fdependabot%2Fdependabot-core%2Fissues%2F4979" frameborder="0" scrolling="no" loading="lazy"></iframe></span><a href="https://github.com/dependabot/dependabot-core/issues/4979" style="display:none" target="_blank" rel="nofollow noopener noreferrer">https://github.com/dependabot/dependabot-core/issues/4979</a></p>


<p>上記に記載があるが、一旦の回避策としては、<code>dependabot.yml</code>の<code>version-strategy</code>を<code>increase-if-necessary</code>などに指定すれば良い</p>
<p><span class="embed-block zenn-embedded zenn-embedded-card"><iframe id="zenn-embedded__630118b67665" src="https://embed.zenn.studio/card#zenn-embedded__630118b67665" data-content="https%3A%2F%2Fdocs.github.com%2Fja%2Fcode-security%2Fdependabot%2Fdependabot-version-updates%2Fconfiguration-options-for-the-dependabot.yml-file%23versioning-strategy" frameborder="0" scrolling="no" loading="lazy"></iframe></span><a href="https://docs.github.com/ja/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy" style="display:none" target="_blank" rel="nofollow noopener noreferrer">https://docs.github.com/ja/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#versioning-strategy</a></p>
