Automate project dependency auditing and updating

[jamesrweb]

Proposed Changes

• Automate project dependency auditing
• Automate project dependency updating
• Run the automation for dependency management on a weekly basis

[yevdyko]

I'm wondering if we can achieve the same thing by configuring a dependabot? Is there any advantage to using your own cron job script?

[jamesrweb]

I'm wondering if we can achieve the same thing by configuring a dependabot? Is there any advantage to using your own cron job script?

I'm honestly not sure, I guess the main benefit is just full customisation and to continue using pnpm with our setup script. Perhaps Dependabot is a better direction in the sense that it's a GH product though... WDYT?

[yevdyko]

I'm honestly not sure, I guess the main benefit is just full customisation and to continue using pnpm with our setup script. Perhaps Dependabot is a better direction in the sense that it's a GH product though... WDYT?

Okay, I've read about it in more detail. At the moment dependabot doesn't support pnpm, so we won't be able to use it, but we can try renovatebot and for now let's still try your script. How about this?

[jamesrweb]

I'm honestly not sure, I guess the main benefit is just full customisation and to continue using pnpm with our setup script. Perhaps Dependabot is a better direction in the sense that it's a GH product though... WDYT?

Okay, I've read about it in more detail. At the moment dependabot doesn't support pnpm, so we won't be able to use it, but we can try renovatebot and for now let's still try your script. How about this?

Sure, we can try this script first and then look into renovate later then as you suggested 👍🏻