Would dependabot keep working with yarn's "frozen-lockfile" option on?

[jraoult]

I want to run yarn install --frozen-lockfile by default to make sure no-one is messing with the lockfile when installing. After all, this is one of the reason for having dependabot :) I'm about to follow the advice here yarnpkg/yarn#4147 (comment): adding --install.frozen-lockfile true in my `.yarnrc.

I was wondering if dependabot would still work or will that prevent it from updating the lockfile as well?

[greysteil]

Good question. If it doesn't then it definitely should. I'll double check for you, but will have it working either way within the hour.

[greysteil]

Can confirm that Dependabot will continue to work just fine with that setup. ✌️

[greysteil]

(And for good measure, I've just added a test, so you can be sure this won't break in future. dependabot/dependabot-core@6573b80.)

[jraoult]

@greysteil many thanks for your reactivity, this is splendid news