Skip to content

Adopt use of Mend Renovate App to automatically update tooling and dependencies #2040

Open

Description

@ni-jfitzger

Description of issue

  • We periodically have to update our use of GItHub actions in workflows due to deprecations
  • Sometimes a dependency for a tox command will break due to a new version of an external dependency and we won't discover it until our next PR
  • We currently don't lock down our dependencies used to build documentation (so our documentation build could break without warning), but if we do lock them down then we'll accumulate tech debt

The Mend Renovate app can help with this by automatically creating PRs to update actions and dependencies.

Mentioned by @bkeryan in #2039

Activity

  1. ni-jfitzger commented on Feb 9, 2024

    @ni-jfitzger
    CollaboratorAuthor

    We should read up on the app and its terms of service to make sure it's right for us.

  2. ni-jfitzger commented on Apr 25, 2024

    @ni-jfitzger
    CollaboratorAuthor

    Worth considering as an alternative: GitHub's dependabot.
    They essentially do the same thing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions