Renovate has started adding onboarding PRs to a few repos (not exactly sure what triggered it, and not sure why some but not all repos are being onboarded).
In my experience, Renovate does a much better job keeping dependencies up to date compared to Dependabot, and can be extensively configured to adjust how noisy it is.
m
Matt (pactflow.io / pact-js / pact-go)
12/02/2024, 10:02 AM
Seems like a good idea. I definitely enjoy the Pact JS and Golang updates (although Yousaf usually beats me to the merge), and if renovate does a better job then I’m all ears
Matt (pactflow.io / pact-js / pact-go)
12/02/2024, 10:02 AM
I think we still hav snyk about - any thoughts on that? (should we just remove?)
j
Joshua Ellis
12/02/2024, 10:04 AM
Great! I'll monitor the onboarding PRs and adjust the config slightly
Joshua Ellis
12/02/2024, 10:04 AM
I'll also disable Dependabot updates, since there's no need to keep both