Azure / Azure/bicep

Dependabot should Suggest Updating Resource API Versions

Open
#8,324 5 comments 2 reactions 0 assignees View on GitHub
discussion enhancement
Dominant language
Bicep
Stars
3.6k
Forks
830
Avg merge
1d 21m
Merged PRs (30d)
79

Description

**Is your feature request related to a problem? Please describe.**
When using ARM/Bicep templates, we generally want to use API versions that are less then 2 years old. Currently, we must manually keep track of this, and manually track down each resource and API version to update.

**Describe the solution you'd like**
DependaBot offers dependency update suggestions for various languages like Python or C#. DependaBot should also be able to scan ARM/Bicep templates, and provide suggestions when a new API version is available.

DependaBot should also be able to provide "Security" related updates when critical issues are found in a specific API version.

Contributor guide

Open the contributing guide

Research direction

Start by examining how Dependabot currently discovers and updates dependencies, then determine where ARM/Bicep templates could be recognized. Define how resource API versions are compared, how available updates are found, and how security-related updates would be represented. Done means the scope and integration point are established with tests covering update and security suggestions.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.