vercel[bot]
commented
1 year ago The latest updates on your projects. Learn more about Vercel for Git ↗︎
| Name | Status | Preview | Comments | Updated (UTC) |
|---|---|---|---|---|
| plugin-sandbox | ✅ Ready (Inspect) | Visit Preview | 💬 Add feedback | Aug 14, 2023 9:38am |
What?
This PR enables dependabot, which monitors and create pull requests for us to upgrade all the dependencies.
Why?
JIRA: EXT-1893
It's better to keep upgrading dependencies consistently, rather than doing a lot of updates in bulk and not being able to figure out why something is broken.
We will have to iterate on configuring dependabot. But for now, I've configured it to create a grouped pull-request, which means we will have a single PR per week with all the upgrades grouped together, instead of having one PR per one dependency, meaning lots of PRs created and blocking the CI pipeline.
How to test? (optional)