Does anyone have a solution for renovate/dependabot + SST + aws-cdk-lib and keeping them all in sync? Would I want to exclude

aws-cdk-lib

and do something like

sst update

in an action when

sst

gets bumped?

Yeah, that should work. Excluding

aws-cdk-lib

and

@aws-cdk/*

packages.

sst update

will update them to the latest supported version.

🥳 yup seems to work Threw together a quick composite action to take care of it that runs on our bot PRs https://github.com/uShip/actions/blob/main/sst-update/action.yml

Oh nice. Do you mind if I open a discussion on GH and paste this script there, in case others find this useful?

Sure! Not doin' anything to crazy. For some context one how it's being implemented in a consumer workflow:

# If this is a renovate PR, run SST update to make sure aws-cdk-lib is in sync.
    - if: github.actor == 'renovate[bot]'
      name: Get SST Version
      id: sst-version
      run: >
        echo "::set-output name=version::$(jq '.dependencies["@serverless-stack/cli"]' package.json -j)"
    - if: github.actor == 'renovate[bot]'
      uses: uship/actions/sst-update@main
      with:
        version: ${{ steps.sst-version.outputs.version }}

Awesome 🙏 https://github.com/serverless-stack/serverless-stack/discussions/1312