System for keeping package.json up to date

dreeves commented 4 months ago

### Desiderata
- [ ] Pick something and get it in the README

Brainstorming:

Import it into Glitch which has a nice tool for clicking on packages to upgrade them one by one
VS Code extension: Version Lens (says ChatGPT)
VS Code extension: npm Intellisense (says ChatGPT)
npm-check (says ChatGPT; and npm-check -u should open an interactive dialog)
Built-in npm outdated to see what you should upgrade, and yarn has a similar thing

Verbata: dev env, bumping versions, security upgrades, dev maintenance, package.json,

adamwolf commented 4 months ago

dependabot (part of github) or similar CI tools: they can make a PR bumping a version, can sometimes show you changelogs, and it'll run your tests right there. pretty configurable, and you can interact with it right in the PR (like, you can say "@ dependabot rebase" and it'll rebase the PR on the main branch)
npx npm-check-updates --interactive

narthur commented 2 months ago

I propose that as a part of BM-2024-6 we address this issue by enabling dependabot on this repo and adding pnpm outdated as a CI check.

beeminder / blog