search

obsidiandynamics / kafdrop

Kafka Web UI
Apache License 2.0
5.56k stars 841 forks source link

feat: enable Dependabot to update deps and update base image tag #404

Closed Bert-R closed 2 years ago

Bert-R commented 2 years ago

Dependabot will now create pull requests when new Docker images, dependencies or GitHub actions become available. By fixing the base image tag, we always exactly know what base image we are using and Dependabot will propose updates.

This will reduce the probability of accumulating known vulnerabilities, like suggested in #403

Bert-R commented 2 years ago

@davideicardi It initially gives a barrage of PRs, as you face now. But it'll become manageable after the first wave.