Dependabot support

[cpvandehey]

Hey Folks

My team would love to hold onto this plugin as we head towards an automated way of updating dependencies.

Currently, dependabot is being explored because of its native github integration (perhaps even owned by github now?).

I would like to hear some thoughts on this topic. Maybe there is a different tool that has more native support for this plugin?

[janhoy]

I filed an issue in the dependabot project, as it seems like a better idea for dependabot to support this plugin than the other way around. We'd like dependabot to open upgrde propsal PRs against the versions.props file, right?

[maccuaa]

Along the same lines, supporting Renovate Bot would also be really nice.

https://docs.renovatebot.com/java/#gradle

Renovate already "supports dependencies whose version is defined in a *.properties file"

Sounds like it wouldn't be much of a stretch for them to support this project's versions.props

[janhoy]

Issue for renovatebot: renovatebot/renovate#8017
Looks like a good alternative to dependabot.

[janhoy]

Wanted to share progress on Renovate support. I made a PR here renovatebot/renovate#19182 that now works well for my own testing, and is currently being reviewed and considered for merging. Have a look and chime in if you see something that should be corrected.

[janhoy]

Gradle-Consistent-Versions support in Renovatebot was released yesterday in v34.52.0 https://github.com/renovatebot/renovate/releases/tag/34.52.0

To try it out as GitHub app https://github.com/marketplace/renovate or run it from commandline via npm: npm install renovate -g. It works pretty much the same as dependabot.