feat: dependabot workflow automation for updating dependency

[Rajpratik71]

Description

Dependabot workflow automation for updating dependency

Closes #2151

• Relevant Issues : Update Github actions node version to 16 #2151
• Relevant PRs : (optional)
• Type of change :
  • New feature
  • Bug fix for existing feature
  • Code quality improvement
  • Addition or Improvement of tests
  • Addition or Improvement of documentation

[ptrthomas]

@Rajpratik71 I'm sorry can you explain what this is about ? this is not clear at all

[ptrthomas]

@Rajpratik71 okay, I think I get it a little bit. I'm personally not in favor of commits by bots, so for now - if you can just upgrade manually the versions needed, that will be very much preferred. or if you have some other suggestions

[Rajpratik71]

Manual control of dependency is fine but with a growing no. of distributed upstream dependencies, it becomes hard to manage. So, for that automation should be there to update dependencies. Further, CI Pipeline is there to test those changes.

Further, this will not update the dependencies automatically, instead, a PR will be opened with changes that can be reviewed and tested with CI.

[ptrthomas]

@Rajpratik71 makes sense ! merged

[joelpramos]

I think you might want to use the target-branch property to target PRs to the develop branch. https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#target-branch

[joelpramos]

Alternatively you can consider patch releases against master just for dependency updates and continue on develop for minor releases. Might need to automate merges from master into develop.

[Rajpratik71]

Alternatively you can consider patch releases against master just for dependency updates and continue on develop for minor releases. Might need to automate merges from master into develop.

Right @joelpramos , this approach make sense, as might have to patch master , while continue developing on develop.

And further, have to rebase develop from master.