Renovate
Renovate ⧉ automatically bumps dependency versions on a configurable schedule. It covers library dependencies, Terraform providers, GitHub Actions and more.
Mend
We do not run Renovate ourselves. Rather, we use Mend's hosted offering which is limited in its free version but sufficient for our purposes.
You can access Mend's Renovate dashboard for our monorepo here ⧉. Use your Lyceum GitHub credentials to authenticate. There you'll see an overview of Renovate jobs that are in progress or have completed. These jobs are automatically triggered whenever code in our monorepo changes.
Pull requests
Renovate will create pull requests updating dependencies each Monday morning around 9am (Zurich time). It will not attempt to bump dependencies to their next major version to avoid introducing breaking changes.
These pull requests have to be approved and merged manually by a code owner. This step is intentionally not fully automated so that a human can evaluate any regression or security concerns.