Dependabot should Suggest Updating Resource API Versions
- Dominant language
- Bicep
- Stars
- 3.6k
- Forks
- 830
- Avg merge
- 1d 21m
- Merged PRs (30d)
- 79
Description
**Is your feature request related to a problem? Please describe.**
When using ARM/Bicep templates, we generally want to use API versions that are less then 2 years old. Currently, we must manually keep track of this, and manually track down each resource and API version to update.
**Describe the solution you'd like**
DependaBot offers dependency update suggestions for various languages like Python or C#. DependaBot should also be able to scan ARM/Bicep templates, and provide suggestions when a new API version is available.
DependaBot should also be able to provide "Security" related updates when critical issues are found in a specific API version.
Contributor guide
Research direction
Start by examining how Dependabot currently discovers and updates dependencies, then determine where ARM/Bicep templates could be recognized. Define how resource API versions are compared, how available updates are found, and how security-related updates would be represented. Done means the scope and integration point are established with tests covering update and security suggestions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100