Enable pub publish dry run, set up dependabot

[nohli]

No description provided.

[nohli]

Why is using master preferred?

I think, with the mock credentials, the actions doesn't work.

[AlexV525]

Generally I'd prefer to update pub dependencies only when in major/minor updates, there should be no need to follow patches.

[nohli]

This config is ignoring minor and patch updates for pub dependencies.

[AlexV525]

Ah that's great

[AlexV525]

Why is using master preferred?

This is suggested by the author in one of his comments, I cannot find it at present,

I think, with the mock credentials, the actions doesn't work.

Actually this will work because if you're developing on forks, their repo would not contain an actual credential, and a dry-run does not require a valid credential.

[nohli]

Why is using master preferred?

This is suggested by the author in one of his comments, I cannot find it at present,

I'm using v1.6 for my packages, and it works well (accidentally just pushed 1.6 without the v).
Thought, it's safer than master, plus I've added dependabot, so it got updated.

I think, with the mock credentials, the actions doesn't work.

Actually this will work because if you're developing on forks, their repo would not contain an actual credential, and a dry-run does not require a valid credential.

That's true. I assumed, that was the reason why the dry run fails at main. Looks like it works with the mock credentials, good to know.