Skip to content

Dependency management

This page defines the minimum policy for dependency updates.

Policy

  • Every maintained repository MUST use an automatic dependency management tool.
  • Repositories SHOULD use Renovate.
  • Repositories SHOULD utilise the dependency management restrictions outlined in the National Archives central renovate config even if not using renovate: https://github.com/nationalarchives/renovate-config