Consider adding the Dependabot app to the project to manage dependency updates. Dependabot can create pull requests, rebase if necessary etc and will run through CI like any PR which will lessen the burden of keeping up to date with packages used in the project.
Consider adding the Dependabot app to the project to manage dependency updates. Dependabot can create pull requests, rebase if necessary etc and will run through CI like any PR which will lessen the burden of keeping up to date with packages used in the project.
Check out the [official Dependabot(https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/) post about being integrated into GitHub.