Dependency Management with Dependabot & Renovate

[xomiamoore]

Recently, I adjusted some Renovate settings to try and make onboarding easier, and accidentally enabled it for many repos. If you have been seeing duplicate notifications from both Dependabot and Renovate, I apologize. I have adjusted the Renovate settings, but I am not sure if that will stop the notifications entirely.

I am working on some better documentation around dependencies, but until then, here are basic instructions for enabling/disabling both tools.

Renovate

If you want to turn off Renovate PRs, you will need to make sure that in renovate.json:

{ "enabled": false }

Dependabot

To enable or disable dependabot, go to the Security settings of the repo in question, then Code security and Analysis, then Dependabot alerts.

---

Please let me know if you're having any other problems, and I apologize again for any duplicate alerts.