This bounty is no longer available
Web3 DAO | Optimism Logo

Add dependabot for dependency management.

Organization

Optimism

Deadline

N/A

Status

ENDED


INSTRUCTIONS

<!-- Need help? Refer to our contributing guidelines for additional information about making a good issue: https://github.com/ethereum-optimism/.github/blob/master/CONTRIBUTING.md -->

Is your feature request related to a problem? Please describe.

We are working on an integration with Celestia based on our fork: https://github.com/celestiaorg/optimism

We want to use dependabot to help track changes from upstream repos. Since this repo doesn't have dependabot, we enabled it on our repo and immediately received a flood of PRs. Ideally our dependabot only watches for updates unique to our repo, and part of this would be ensuring that this repo is also updating its dependancies.

Describe the solution you'd like

Implement dependabot to keep dependencies updated.

The yml file should look like this I believe, happy to open a PR for this

version: 2
updates:
  - package-ecosystem: docker
    directory: "/ops/docker"
    schedule:
      interval: daily
    open-pull-requests-limit: 10
  - package-ecosystem: github-actions
    directory: "/"
    schedule:
      interval: daily
    open-pull-requests-limit: 10
  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: daily
    open-pull-requests-limit: 10
  - package-ecosystem: gomod
    directory: "/"
    schedule:
      interval: daily
    open-pull-requests-limit: 10

Describe alternatives you've considered

Additional context