Agent WranglersVersion control and review Recommended
Update dependencies in small automatic steps
Let a bot open a pull request for each dependency update, and merge it when the checks pass.
How to do it
Use a tool such as Renovate or Dependabot. Group small updates, and give major versions their own pull request. Security holes in dependencies are covered in the security testing playbook.
How to check
No dependency is more than one major version behind without a written reason. The bot's open pull requests are reviewed every week.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers engineering playbook: https://agentwranglers.se/playbook/engineering/version-control-and-review/automated-dependency-updates.