dependabot for mantle git submodule?

[miabbott]

Dependabot has support for git submodules and keep mantle current can be a chore. As mantle becomes more and more focused on *COS hosts, it makes sense (to me, at least) to keep the submodule current.

Let's consider using this to keep the submodule up to date?

I know there's been discussions about whether we want to keep mantle included as part of cosa, but until those decisions have been made, we can lessen the maintenance burden until then.

The only drawback is that the fastest update cadence is daily, so there may still be times where we want to manually update the module outside of the bot.

[lucab]

The only drawback is that the fastest update cadence is daily, so there may still be times where we want to manually update the module outside of the bot.

@miabbott for what is worth there is a "Bump now" button per-repo in the bot panel for this kind of things (I don't know if it has some kind of rate-limiting).

[miabbott]

PR to add dependabot config in #912

[lucab]

@miabbott stamped (sorry I missed it before), do you have access to complete the setup on your own?

[miabbott]

@lucab yeah, i believe i do

[miabbott]

Closed in #912