Kvalifik / how-we-work

A handbook for software development at Kvalifik
0 stars 0 forks source link

Dependabot automatic patch-level security updates #108

Open forecast[bot] opened 2 years ago

forecast[bot] commented 2 years ago

We should consider a solution where Dependabot automatically creates pull requests that updates insecure dependencies at a patch-level and merges them if tests pass

This will save time spent on Service Agreements

forecast[bot] commented 7 months ago

Lets give it a go on EV and see how it turns out.