Dependabot-core: CLI to bump all versions at once

[rafaelrocha-hotmart]

Context:
As project's dependencies grow, handle all opened PR by each dependency gets difficult and boring. So a way to handle it at once would make our daily job easier.

Solution A:

• Have a configuration option to make Dependabot open only one PR with all the versions bumped instead of one by each dependency.

Solution B:

• Provide a CLI tool to run it locally for a specific project. So we can bump the versions locally, test, fix, test and then push the new versions.

[rebelagentm]

Thank you for submitting this! We'll take it into consideration as soon as we can.

[rolandsusans]

Regarding solution A - It's one of the main blockers why we don't use dependabot at the moment. @rebelagentm is there a plan to implement such a feature?

[rebelagentm]

@rolandsusans Adding a way to group or bump large numbers of dependencies at once is high on our list, but we currently don't have a timeframe. We're still pretty swamped integrating Dependabot into GitHub at the moment.

[infin8x]

Duplicate of #1190

Solution A would be satisfied by #1190. It's unlikely we'd take solution B.