yorkie-team/yorkie

Setup Dependabot

jongwooo opened this issue · 5 comments

jongwooo commented

Description:

If we add dependabot to the list of bots we can continuously check our dependencies.

Why:

Updating manually, like in #426, #641, requires checking for dependency updates every time. Automating this with dependabot will save us a lot of work.

krapie commented

We are currently using dependabot in yorkie-js-sdk.
It will be good to introduce dependabot in yorkie too.

Thanks!

  • 👍1
  • 🚀1
hackerwins commented

I thought we already used the bot in this repository. How can we add the bot to the list of bots?
https://github.com/yorkie-team/yorkie/commits?author=dependabot%5Bbot%5D

  • 👀1
krapie commented

Oh, we had dependabot in this repo. But it seems like this bot is barely updating dependencies.

jongwooo commented

Oh, we had dependabot in this repo. But it seems like this bot is barely updating dependencies.

GitHub may create automated security fix PRs to repositories affected by vulnerabilities disclosed by recently published GitHub security advisories. However, for normal version updates, we need to configure dependabot.yml in the project.

hackerwins commented

@jongwooo Thanks for your explanation. Feel free to send a PR about this.

  • 👍1
  • 🚀1