[FR] Consider using DependaBot for automatic dependencies upgrade
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- github, typescript
Research direction
Start with the linked GitHub Docs Dependabot quickstart and inspect this repository's CI pipeline, including the existing pnpm and yarn audit steps. Done means Dependabot or a similar service is configured to detect vulnerable dependency updates and open automated upgrade changes without manual issue and PR creation.
Written by the indexing model from the issue text.
Description
Is your feature request related to a problem? Please describe.
When working on projects for my clients, I always setup a pnpm audit && yarn audit as a blocking step of my CI pipeline to ensure no known vulnerabilities are going to production.
The firebase-admin-node package has had vulnerable dependencies detected several times which led me to invest time and energy opening issues and PRs.
Describe the solution you'd like
I would like the maintainers of this repository to setup DependaBot or any similar solution so the dependencies upgrade for vulnerabilities do not have to be done manually every time one is detected.
Describe alternatives you've considered
My current alternative is opening issues and PRs manually on the repository.
Additional context
You can find a quickstart guide for DependaBot on Github Docs.
- Dominant language
- TypeScript
- Stars
- 1.7k
- Forks
- 419
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 16
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from firebase/firebase-admin-node
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
firebase/firebase-admin-node#3234 ·
-
firebase/firebase-admin-node#3221 · 3 comments · 1 assignee ·
-
api: messaging
Difficulty 3/5 1-2 days Newbie friendliness 70/100
firebase/firebase-admin-node#3215 ·
-
api: messaging
Difficulty 5/5 Over a week Newbie friendliness 28/100
firebase/firebase-admin-node#3214 ·
-
api: firestore type: feature request
firebase/firebase-admin-node#3183 · 1 comment · 1 assignee ·
All issues in firebase/firebase-admin-node
Similar issues
-
bot:ai-assisted component:compact-js status:untriaged
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
midnightntwrk/midnight-sdk#403 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
joinmarket-webui/jam#1496 · 1 comment ·
-
Tech
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
opencrvs/opencrvs-core#13865 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
linagora/twake-calendar-frontend#1377 · 1 comment ·
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
EclipseFdn/open-vsx.org#13385 · 1 comment ·