Keeping up with dependency updates
Dependency updates are an inevitable part of software engineering. With every major language offering its own package ecosystem, keeping up with these updates — some of which address critical security issues — can quickly become tedious. TLDR? My dependency update PRs are automatically merged by a tool Reports of my GitHub Actions runs are generated by another tool The problem I maintain several open source projects on GitHub. While GitHub offers handy tools like Dependabot to regularly scan repositories and create pull requests for dependency updates, keeping up with these PRs can quickly become overwhelming. My notifications panel often looks like this: ...