Problem
We have been seeing an increase in the frequency and number of dependency updates. Part of this demand is to patch dependencies as they address their own CVEs. We want to automerge dependency updates to development so those updates can be more easily tested.
Solution
Explore automerging Dependabot PRs or optionally configuring Renovate to mange & automerge dependencies. We may also want to investigate consolidating the meteor/npm environments as a related issue to simplify dependency management.
No Go's
Describe any features or behaviors that have been considered and rejected as out of scope for this feature
Additional context
Add any other context about the feature here.
Problem
We have been seeing an increase in the frequency and number of dependency updates. Part of this demand is to patch dependencies as they address their own CVEs. We want to automerge dependency updates to
developmentso those updates can be more easily tested.Solution
Explore automerging Dependabot PRs or optionally configuring Renovate to mange & automerge dependencies. We may also want to investigate consolidating the meteor/npm environments as a related issue to simplify dependency management.
No Go's
Describe any features or behaviors that have been considered and rejected as out of scope for this feature
Additional context
Add any other context about the feature here.