Skip to content

Do we want dependabot-style PRs? #103

@sgibson91

Description

@sgibson91

Context

At the moment, the Action changes all tags in a single commit, pushes to a single branch, and opens a single PR. An alternative way to manage this would be to follow the dependabot pattern where a new branch/PR is created for each dependency being updated during that run of the bot.

Pros:

  • Would allow for more easy management of dependency upgrading for maintainers - merging a single PR represents making a single change to your code, as opposed to lots of dependencies being upgraded at the same time

Cons:

  • Lots of repeated calls to the API
  • Multiple PRs can be noisy (provide a max_pull_request variable like dependabot)
  • We will need a more "clever" way to identify previously opened PRs

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions