GH200: Dependabot configuration file extension

[angelo-peronio]

The repository of the gssfile library fails the GH200 rule "Maintained by Dependabot" because the Dependabot config file is named dependabot.yaml, whereas repo-review expects only dependabot.yml.

Can it be made so that repo-review is satisfied with both .yaml and .yml extensions?

[henryiii]

If it works with both, yes.

[henryiii]

I’m not seeing any mention of the .yaml being supported here: https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide

The last time I see it working for your repo was before angelo-peronio/gsffile@051560e

[angelo-peronio]

Thank you for looking into this. I was able to run it successfully right now.

[angelo-peronio]

Thank you very much!