Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot Integration #251

Closed
elliot-huffman opened this issue Jun 7, 2024 · 1 comment
Closed

Dependabot Integration #251

elliot-huffman opened this issue Jun 7, 2024 · 1 comment
Assignees
Labels
dependencies Pull requests that update a dependency file enhancement New feature or request

Comments

@elliot-huffman
Copy link
Collaborator

elliot-huffman commented Jun 7, 2024

Hi Rhys,

I would like to propose deep Dependabot integration for automated dependency update PRs.
Dependabot is currently only in security scanning mode.
This is a great first step, why not use it to its full potential?

Fear not, this isn't as difficult as it sounds, I have created a PR (merge only after the VS code #250 is merged) to do just this.
This initial PR only enables Dependabot to scan the NPM and GH Actions versions for newer versions, in a future update, we can configure it to auto merge the PRs it will auto generate when all of the tests successfully run.

By enabling Debendabot, it will also enable the dependency graph feature for dependabot:
screenshot of the dependency graph insights tab in GH where dependabot is not enabled :(

Changes:

  • Enable Dependabot for NPM Updates
  • Enable Dependabot for GitHub Actions Updates
@elliot-huffman elliot-huffman added enhancement New feature or request dependencies Pull requests that update a dependency file labels Jun 7, 2024
@elliot-huffman
Copy link
Collaborator Author

@rhys-vdw, since this is merged now, ready for publishing a major release (since old version of node support was dropped)! I have no other updates for now. I will work on prettier and some auto formatting a little later. I am done for today and until I get some milestones done on my project since I got this supply chain security dramatically improved 😊

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants