Dependabot keeps your gems current, but it doesn't know about the JavaScript packages pinned in your Rails importmap. We're releasing a GitHub Action that opens pull requests for the ones that are outdated or vulnerable. https://thoughtbot.com/blog/announcing-importmap-update-automated-dependency-updates-for-importmap-rails
1 Boost
0 Likes
No replies yet
Be the first to share your thoughts.
