Hacker News Reader

right.

>Renovate Bot noticed that there was a new version of codeintellify so it helpfully created a pull request to update our main repository to codeintellify 3.6.0.

while this sounds really cool and I'll check it out later, automatically updating your code just because a dependency has a new version seems like a REALLY bad idea.

View on HN

It doesn't happen automatically if you don't want it to (and it didn't happen automatically in this case).

The value here is that it notifies you if an update is available (by opening a pull request), automatically tests the new dependency (when CI runs on your pull request), and makes it easy for you to apply the update if you want (by merging the pull request).

Reply on news.ycombinator.com