3 ms·
You can do this with Dependabot [0], recently acquired by Github. We use Dependabot, and I love it for our backend repositories, but anything with node depende
by QuinnWilton 7y ago
You can do this with Dependabot [0], recently acquired by Github.
We use Dependabot, and I love it for our backend repositories, but anything with node dependencies ends up being easier to manually update (because there ends up being so many dependencies that get updated every day, that opening a PR for each one essentially launches a denial of service attack on our CI system)
[0] https://dependabot.com/ https://dependabot.com/
- nwah1 7y agoTheir homepage states: >Live, daily, weekly or monthly updates >Choose to receive update PRs live, daily, weekly or monthly. We make an exception for security patches, which you'll always receive immediately.
- QuinnWilton 7y agoConfiguring it to open pull requests less frequently doesn't help, since dependencies still get updated one by one, rather than in batches. I've found it easier to just run an interactive yarn upgrade every so often.