We added renovate bot to Grove. It will open MRs to update dependencies for the Terraform and Python dependencies. Listaflow and Sprintcraft are not integrated. I think the integration should be done by Bebop if needed. However, if that’s needed, but there is no capacity for that, Serenity can do that too. First, let’s discuss if it would be beneficial for those repos or would simply generate noise.
We should complete SE-6449 before spending more time on SprintCraft. While I would like to make lots of changes to that project, it would not be reasonable to do so if we were to deprecate it.
However, having basic dependency update scanning seems like the kind of thing that should be done. Especially since there isn’t something like Dependabot on GitLab that can even do the bare minimum of scanning for security updates, so I’m game for adding it even with those constraints. As long as we’re running it, basic maintenance should be done.