Look at all of the open PRs in: https://github.com/wbstack/queryservice-gateway/pulls?q=is%3Apr+state%3Aopen+label%3Adependencies+label%3Agithub_actions
For each PR:
- Check the release notes of the dependency being updated (e.g for any breaking changes or required actions)
- Check the PR is up-to-date with the latest commit on main
- Check CI is passing
- If all checks are okay, approve and merge the PR into main
Once all Dependabot PRs are merged:
- Update the CHANGELOG
- Manually create a new tag on the latest commit following the same format as previously used
- Open a PR for staging/local in the wbaas-deploy repo to use the image created by the newly updated GitHub Actions pipeline
- Ship this new image to staging. Check staging works and there isn't a spike in errors.
- Repeat steps 3. and 4. for production
For any Dependabot PRs that can't be merged (e.g. due to failing checks, complex additional dependencies, changes required to handle breaking changes, etc.) we should open a separate ticket in the Engineering Backlog column and skip the PR. If you see an easy, quick, way to resolve the issue, go ahead - use your judgement though.
When this task is done, it should be moved to the Done column on the Kanban board and not moved back to the parent board. New versions of this task will be created in the future.
PRs: