Update template dependencies automatically

[Imipenem]

Is your feature request related to a problem? Please describe.

I came up with this question according to #188.
Currently its very tedious and lot of manual work to keep all of the dependencies of the templates up to date.

This mainly is driven by the fact, that we dont want users to be spammed for example with dependabot PRs after creation (this also heavily applies to CT)

Describe the solution you'd like

We should think of a way, to keep the dependencies automatically up to date.

Can dependabot handle environment.yml files?
Shouldn't also be to tough to write something on our own and wrap it in a GitHub Actions, that is run scheduled once a day or so.

What do you think @Zethson ?

[Zethson]

No it can't. There is an issue over at dependabot. Sadly. Tuesday, 05 January 2021, 08:36AM +01:00 from Philipp Ehmele notifications@github.com :

…

Is your feature request related to a problem? Please describe. I came up with this question according to #188 . Currently its very tedious and lot of manual work to keep all of the dependencies of the templates up to date. This mainly is driven by the fact, that we dont want users to be spammed for example with dependabot PRs after creation (this also heavily applies to CT) Describe the solution you'd like We should think of a way, to keep the dependencies automatically up to date. Can dependabot handle environment.yml files? Shouldn't also be to tough to write something on our own and wrap it in a GitHub Actions, that is run scheduled once a day or so. What do you think @Zethson ? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or unsubscribe .

[Imipenem]

Wouldn't it be better then to write our own stuff mid-term and see how dependabot goes?

[Zethson]

I don' think so to be honest. There are more pressing issues and eventually dependabot will implement it. I would be surprised if it weren't in 2021.

CC: dependabot/dependabot-core#1249
dependabot/dependabot-core#2227

mlf-core lint also adds linting warnings for outdated dependencies.