Steps to handle dependabot PRs

You can find dependabot PRs by checking github

  1. Check to make sure CI passes on the dependabot PR.
  2. Compare the date of the PR with the date of the last commit to main. If there have been commits since dependabot made its PR, trigger a rebase by commenting @dependabot rebase
  3. Copy the name of the dependabot branch.
  4. Using Ansible Tower, deploy the branch to staging or qa.
  5. After the branch is deployed, test the application to make sure all is well.
  6. If everything looks good, approve the PR and merge it.