Configure Dependabot to automate Dependency Version updates

[M4dhav]

We should add Dependabot to the repository to automate dependency version upgrades

[github-actions]

👋 Hello @M4dhav!
Thank you for opening this issue. Our team will review it soon. 🚀

• If you can, please provide more details like steps to reproduce, expected vs. actual behavior, and screenshots (if applicable). 📌

We appreciate your contribution! 💡

[4555jan]

@M4dhav can I update it ? Can you please assign this to me ?

[M4dhav]

As you already have multiple issues assigned to you, once some of those are finished then I can assign this to you

[Charan-BS]

I think i can work on this issue as i already have experience with solving dependency conflicts and other issue assigned to me is related to document creation, not exactly coding ofcs.
Please assign if you feel i can contribute

[M4dhav]

Alongside this, would adding a dependabot config to do this periodically automatically be a good idea? It would work as long as major versions aren't in the updates.

[Sinhapratik006]

can you provide me some more details so I can work on the issue

[Charan-BS]

Hi @Sinhapratik006, as this task is assigned to me and I will be working with the issue, I would suggest you to look for other issues .

Thank you.

[Sinhapratik006]

@Charan-BS Okay bro

[M4dhav]

Alongside this, would adding a dependabot config to do this periodically automatically be a good idea? It would work as long as major versions aren't in the updates.

@Charan-BS I wanted your opinion on this, what do you think about this

[Charan-BS]

Well, I got to know depandabot can be best used to update minor versions and we can set depandabot interval like monthly, weekly, daily.

But as iam implementing this for this first time iam not very sure how it will handle when it comes to dependency conflict.For ex:
If it raises a single PR when a new version of firebase_core is there, the other firebase packages needs to updated alongside to avoid dependancy conflict

So iam in dilemma should we use this or not
What's ur take on this

[M4dhav]

Can we configure Dependabot to update all dependencies together instead of 1 by 1? Or atleast to update all dependencies related to firebase together?