GitHub repositories in the wptrainingteam organisation often make use of package managers, generally Composer for any PHP dependencies and npm for any JavaScript dependencies.
To ensure the dependancies used in these repositories are kept updated, Dependabot is recommended. Dependabot can be configured to regularly check for updates and create pull requests to update the dependencies.
The following guides will walk you through setting up Dependabot for these repositories
- Code owners: Configure Dependabot for your repository
- Training team contributors: Setting Up Dependabot for WP Training Team repositories
- Training team admins: Reviewing and merging the Dependabot, Auto-Approve, and Auto-Merge Workflows