Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add periodic dependency updater like Dependabot #15

Open
nifadyev opened this issue Sep 26, 2024 · 1 comment
Open

Add periodic dependency updater like Dependabot #15

nifadyev opened this issue Sep 26, 2024 · 1 comment

Comments

@nifadyev
Copy link
Contributor

Dependency updater will help to keep project dependencies up to date. Relevant dependencies reduce security issues, allow using the latest features, but may break compatibility. As a result, dependencies updater is helpful, but their changes should be validated and tested manually.

The first and obvious option is Dependabot. It is the default Github updater, and it is widely used in many projects. However, sometimes it lacks some useful features and may spam PRs if it is improperly configured (like any other updater). Also, only Github is supported, so migration to other hosting platform may be difficult

Another option is Renovate. It supports many hosting platforms, its development is more active and PRs description contains more helpful information.

Compare dependabot PR and renovate PR

@soltanoff
Copy link
Member

It would be nice to have the opportunity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants