Dependabot Issue Management

[sj-williams]

Background

We should have better organisation and view of dependabot PRs in our GH Projects setup.

Find a way to configure dependabot to automatically label with dependabot and then use an action / workflow of sorts to prase these labelled PRs and add them to our CP Project under Status: Dependabot.

yml config: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

Add to Project action: https://github.com/actions/add-to-project

Proposed user journey

Approach

Which part of the user docs does this impact

Communicate changes

• [ ] post for #cloud-platform-update
• [ ] Weeknotes item
• [ ] Show the Thing/P&A All Hands/User CoP
• [ ] Announcements channel

Questions / Assumptions

Definition of done

• [ ] readme has been updated
• [ ] user docs have been updated
• [ ] another team member has reviewed
• [ ] smoke tests are green
• [ ] prepare demo for the team

Reference

How to write good user stories