elastic / elastic/cloudbeat

Refactor update golang dependencies workflow

Open
#3,652 0 comments 0 reactions 0 assignees View on GitHub
cloudbeat Team:Cloud Security
Dominant language
Go
Stars
58
Forks
55
Avg merge
9h 9m
Merged PRs (30d)
424

Description

Currently, we have both updatecli and dependabot to update Go dependencies, which leads to confusion.

We need to refactor our workflows, keep only one that updates the dependencies (except for beats that will be covered in a separate workflow).

We need to choose between dependabot, updatecli, and renovate.

Some rules of thumb that we might need to consider:
* having a open pull request limit
* having well-organized of update groups (e.g. each cloud sdk is a group)
* optionally a functionality like dependabot's [cooldown](https://github.com/elastic/cloudbeat/issues/3651) option might be usefull to utilze.

Update: (add renovate / Renovate Scalability Project to comparison)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.