search

deps-rs / deps.rs

Keep your dependencies up-to-date
https://deps.rs
Apache License 2.0
426 stars 26 forks source link

ci: add dependabot package updating #202

Closed robjtede closed 1 year ago

robjtede commented 1 year ago

partly so that we have PRs to merge to resolve the stuck issues faster

this config set up is pretty good for application projects in my experience

paolobarbolini commented 1 year ago

I think it's a good idea in general to automate dependency updates. Considering that dependabot ignores the interval setting when it comes to security updates ^1, I wouldn't run this daily.

partly so that we have PRs to merge to resolve the stuck issues faster

Actually we haven't automated deployments to the server, so merging a PR doesn't fix the stuck issues :sweat_smile: