Skip to content

chore: add Dependabot config for automated dependency updates #2321

Description

@AshayK003

Problem

The monorepo has no automated dependency management. Several packages are critically outdated:

  • Babel v6 (babel-cli@^6.26.0, babel-preset-env@^1.6.1) — EOL since 2019, no nullish coalescing/optional chaining
  • Jest v22 (jest@^22.4.2) — 2018 release, missing modern features
  • Downshift v1.x (downshift@^1.31.2) — current stable is v9, missing 7 years of a11y fixes
  • Webpack v4 (webpack@^4.18.0) — v5 has been stable since 2020
  • Emotion v10 (@emotion/core@^10.0.28) — v11 is current (Vue package already uses v11)

Suggested Fix

Add .github/dependabot.yml:

version: 2
updates:
  - package-ecosystem: 'npm'
    directory: '/packages/web'
    schedule:
      interval: 'weekly'
  - package-ecosystem: 'npm'
    directory: '/packages/vue'
    schedule:
      interval: 'weekly'
  - package-ecosystem: 'npm'
    directory: '/packages/native'
    schedule:
      interval: 'weekly'
  - package-ecosystem: 'npm'
    directory: '/packages/reactivecore'
    schedule:
      interval: 'weekly'

Also recommend upgrading to actions/checkout@v4 and actions/setup-node@v4 (current is v2).

Severity

Medium — long-term maintenance burden

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions