Enable and Configure Dependabot vesion updates

Open yaqian256 opened this issue 1 year ago • 1 comments

We should consider enable and configure Dependabot version updates -

Settings -> Code security -> enable and configure "Dependabot version updates"

The dependabot can open pull requests automatically to keep our dependencies up-to-date when new versions are available.

See https://github.com/ni/adas-replay-hil-internal/pull/1102 as an example.

AB#2904026

Oct 12 '24 22:10 yaqian256

@maxxboehme As an alternative, consider Renovate. NI has been using Renovate on both GitHub and Azure DevOps repos.

I have personally used Renovate on the measurement-plugin-python, measurement-plugin-labview, and ni-apis repos. Here' s the config I've been using with one of those: https://github.com/ni/measurement-plugin-python/blob/main/.github/renovate.json . It's not perfect in terms of PR churn, but it has been keeping dependencies up to date.

There was a presentation about Renovate at NI Tech this year. It's worth checking out.

Oct 14 '24 15:10 bkeryan