Automate Glean upgrades and update Dependabot interval 📦

[hackebrot]

Currently Dependabot is configured to check for Python package updates every day. This is causing a considerable amount of noise for project maintainers. @badboy and I talked about this on Element today: It would be great if Dependabot could create a single pull request for compatible version upgrades instead of a pull request for every single package, which triggers many GitHub notifications and unnecessary CI runs.

Ideas

Here are a few idea for working around this problem or at least improve the situation for project maintainers:

1. Set Dependabot's schedule.interval to "weekly" and add a step in the Glean release process to submit pull requests to burnham
2. Set Dependabot's schedule.interval to "weekly" and develop a GitHub Action to automatically check for glean-sdk and glean-parser Python package releases and submit pull requests with version upgrades for Glean to burnham
3. Set Dependabot's schedule.interval to "weekly" and add an additional requirements.txt file in a different directory that contains only glean-sdk and glean-parser and set the schedule.interval for that file to "daily"
4. Add a Dependabot update config that uses allow and dependency-name to set different schedule.interval for Glean dependencies and other Python dependencies

Links

• Dependabot directory
• Dependabot schedule.interval
• Dependabot allow