Vocabulary: Switch dependabot PRs to monthly cycle

[zackkrida]

We should change the interval of our dependabot PRs to monthly, to reduce the frequency with which we need to merge them.

---

Original discussion below:

Problem

We should automatically merge our dependabot PRs with passing checks, using the merge me GitHub Action.

This will cut down considerably on developer time each sprint.

Implementation

• [ ] I would be interested in implementing this feature.

[nimishbongale]

@zackkrida

Sometimes, it so happens with dependabot that it says code coverage - unknown in its PR. I'm not sure if this affects anything at all, but this deters me from auto-merging a dependabot PR (in my other personal repo's).

Although this may not be the orthodox way of solving this problem, I would suggest:

• Changing the frequency of dependabot PR's : Although it seems counter-intuitive, we could change the interval: "weekly" attribute in the .github/dependabot.yml to monthly. Most OSS organisations prefer having it monthly (afaik).
• Limiting the PR's raised : Dependabot raises 5 PR's per package manager atm. We could limit that as well, so it would raise 5 or less than 5 PR's in the specified package manager only.

[zackkrida]

@nimishbongale I'm a little skeptical of auto-merging too. The fact that our deployment process is manual makes me less skeptical, but I'll think about it more. I think your suggestions are good compromises.

[dhruvkb]

If we had automated visual testing, merging automatically would not be much of a question. But even in manual deployment, it isn't feasible to individually verify that everything is working as before (and this infeasibility only increases with more components being added to the package).

[zackkrida]

@dhruvkb Agreed. Like I said on the vocab call I think switching the interval to monthly like @nimishbongale is the best path forward.

[akmadian]

I can take this on. Is this change's scope only PRs in vocabulary or all CC repos?

[nimishbongale]

@akmadian

I think it was discussed particularly to do with vocabulary, as I'm not sure about the others (if they want the frequency to be changed ie.)