Adding Project as a variable to dependabot@2

[kzhuklinets]

Hello,

With the dependabot@1 we managed to configure one pipeline that was running checks for all our projects and repos by working directly with the updater component and passing the needed variables there.
In the second version, probably, the same can be done if a project name and id variables from there

dependabot-azure-devops/extension/tasks/dependabotV2/utils/getSharedVariables.ts

Line 98 in a13533f

let project: string = encodeURI(tl.getVariable('System.TeamProject')); // encode special characters like spaces

would be configurable, like with targetRepositoryName.

And then, using

resources: 
  repositories: 

in pipelines, we can have different folders that we can reference in the existing calling pipeline /.azuredevops/dependabot.yml file.

This will simplify and unify the pipelines when a team isn't aware of the "back office" and just receives PRs with bumps.

Does this make sense, or does it cause overcomplication, and can it be done differently?

[rhyskoedijk]

@kzhuklinets are you able to share a bit more about how you configured dependabot@1 to run across multiple projects in a single pipeline? Are you suggesting that a "targetProjectName" option be added or is there more to this that I don't understand?

- task: dependabot@2
  inputs:
    targetProjectName: ...
    targetRepositoryName: ...

[kzhuklinets]

@rhyskoedijk, yes, sure. This is a part of the template we are using. AZURE_ORGANIZATION, AZURE_PROJECT, AZURE_REPOSITORY - the values I reference to. We are bypassing the part with the task by using the container directly.
In general yes, the idea is somehow to move the responsibility of checks to some central place. At least, this works with the previous version (however, we have a lot of joy with authorization issues:)).

steps:
  - bash: |
      docker pull ghcr.io/tinglesoftware/dependabot-updater-${{parameters.packageManager}}:1.40
      docker run --rm -i --network='host' -v "/etc/ssl/certs/:/etc/ssl/certs/" \
      -e DEPENDABOT_PACKAGE_MANAGER=${{parameters.packageManager}} \
      -e DEPENDABOT_OPEN_PULL_REQUESTS_LIMIT=${{parameters.maxOpenPullRequestAtOnce}} \
      -e DEPENDABOT_DIRECTORY=${{parameters.pathToScan}} \
      -e DEPENDABOT_FAIL_ON_EXCEPTION=true \
      -e DEPENDABOT_TARGET_BRANCH=${{parameters.targetBranch}} \
      -e DEPENDABOT_EXTRA_CREDENTIALS='[ommited]' \
      -e DEPENDABOT_IGNORE_CONDITIONS='[ommited]' \
      -e AZURE_ORGANIZATION='ommited' \
      -e AZURE_PROJECT=${{parameters.project}} \
      -e AZURE_REPOSITORY=${{parameters.repository}} \
      -e AZURE_ACCESS_TOKEN=$(System.AccessToken) \
      -e AZURE_MERGE_STRATEGY=squash \
      -e AZURE_HOSTNAME='ommited' \
      -e AZURE_PROTOCOL='https' \
      -e AZURE_VIRTUAL_DIRECTORY='tfs' \
      -e GITHUB_ACCESS_TOKEN=${{parameters.githubAccessToken}} \
      ghcr.io/tinglesoftware/dependabot-updater-${{parameters.packageManager}}:1.40 update_script
    displayName: ${{parameters.displayName}}