News for hackers. Stuff that matters.

A comment on Why I recommend Renovate over any other dependency update tools.

Re:Why I recommend Renovate over any other dependency update... by nikolay on Friday April 12, 2024 @01:37PM (#40015501)
Dependabot is the biggest source of PR spam for me as it's config is so simplistic, you can't easily make it group upgrades. So, when I see suddenly almost a hundred PRs created, I do the upgrade myself, push it, and then Dependabot closes the PR, but I love the hundreds of emails around this process, too.
[ Parent | on HN ]
Re:Why I recommend Renovate over any other dependency update... by jamietanna on Friday April 12, 2024 @03:15PM (#40016606)
You can now group PRs with Dependabot (https://github.blog/2023-08-24-a-faster-way-to-manage-versio...) although it's not quite as powerful as Renovate's functionality
[ Parent | on HN ]
Re:Why I recommend Renovate over any other dependency update... by nikolay on Friday April 12, 2024 @04:52PM (#40017523)
As I said, it's not easy, and not everything is possible either. Monorepos are the biggest victim. I wrote a script that generates the Dependabot config and a GitHub action that updates it when my monorepo changes.
[ Parent | on HN ]