Add tooling bot for automatic dependency and lockfile update

XMLWordPrintableJSON

    • Not Needed
    • None
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?
    • None
    • None
    • None
    • None
    • None
    • None

      Libraries don't distribute lock files, so it would make sense for us to ingest the latest dependency permitted by our semver range whenever possible, there's bots / github actions that can enforce a package-lock update before merging if one exists. Dependabot can also automagically open PRs for CVE updates.

      danger.systems/js

              Assignee:
              Unassigned
              Reporter:
              Neal Beeken
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: