Closed Emily-Jiang closed 3 years ago
Not sure we should update dependencies automatically as it can break things. Getting notified is a good thing but we should keep control of the dependencies.
Yes, we should review the PR created by dependabot before merging for sure.
We have today already these PRs from dependabot. So what is this config for?
This is enabled automatically.
Signed-off-by: Emily Jiang emijiang6@googlemail.com Fixes: #407