DEV Community

Discussion on: Don't get stuck with out of date dependencies!

nfrankel profile image
Nicolas Frankel

I added Dependabot on GitLab with this project.

It doesn't do anything but create a merge request.

Thread Thread
jamesmcmahon profile image
James McMahon Author

Thanks for the tip.

The hurdle for me is that we need to add the ability to test merge requests on-demand to our pipeline. Without that the merge requests of Dependabot become more white noise, as they all require manual intervention to merge and unwinding which dependency upgrades work vs which fail can be be painful.

Part of the reason I like updtr so much is that it does that work for you. The next evolution for me is moving the capability out of a command line to an automated process, either in the pipeline entirely or a combination of pipeline and merge request.