Skip to main content

no-unused-dependabot-enable-beta-ecosystems

Rule catalog ID: R085

Targeted pattern scopeโ€‹

Top-level Dependabot configuration keys in .github/dependabot.yml.

What this rule reportsโ€‹

This rule reports the top-level enable-beta-ecosystems key whenever it is present.

Why this rule existsโ€‹

GitHub currently documents enable-beta-ecosystems as "not currently in use." Keeping it in the file suggests behavior that Dependabot does not actually honor, which adds noise and misleads maintainers reviewing the configuration.

โŒ Incorrectโ€‹

version: 2
enable-beta-ecosystems: true
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"

โœ… Correctโ€‹

version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"

Behavior and migration notesโ€‹

The autofixer removes the top-level enable-beta-ecosystems key entirely. That is safe because GitHub currently documents the setting as unused, so keeping it only adds noise to the file.

Additional examplesโ€‹

This rule is especially helpful in repositories that were initialized from older Dependabot snippets and still carry forward unused top-level keys.

ESLint flat config exampleโ€‹

import githubActions from "eslint-plugin-github-actions-2";

export default [githubActions.configs.dependabot];

When not to use itโ€‹

Disable this rule only if GitHub later gives enable-beta-ecosystems active behavior and the repository intentionally adopts that updated contract before this plugin is updated.

Further readingโ€‹