Repository navigation
Configure dependabot #7766
Description
This is part of the monorepo project.
- Needs investigation to understand if dependabot can cope with npm workspaces
- Currently dependabot is only doing security updates in samples because it can’t handle all updates for the lerna-style monorepo. It might be better at npm workspaces.
- If not, come up with a plan for how/when to update dependencies in the monorepo.
Activity
lizschwab commentedon Aug 18, 2026
I looked through the dependabot PRs and the configuration seems to be working for us right now. Down the road, if we find that we're getting bombarded with too many dependabot PRs (the typical issue in monorepos), we can look at the recommendations in this discussion: https://github.com/orgs/community/discussions/176055.