How to Review and Test Pull Requests for Dependabot

How to review Pull Requests for Dependabot

Prerequisite - These instructions assume you have reviewed the procedures for deploying in order to deploy code to a dev or test environment (See Reference: https://github.com/CDCgov/prime-simplereport/wiki/Deploy)

• Select the Pull Request(PR) Dependabot created

• For the package identified in the PR, verify that this package is present within the codebase.

• Deploy the PR code to a dev or test environment

• Complete the following tests identified in this Bug bash document (https://docs.google.com/document/d/16cfE6gsslhcgvH3-Gi9LfkL85FQ-hEMPBkpLzR9dWWw/edit#heading=h.x3o4nsu2ptqi)

• If any of the Github actions tests or Bug bash test have failed, this PR is not ready for deployment and should be troubleshooted and fixed.

• In the event the dependabot PR gets stuck complete the following steps:

  1. Delete the branch
  2. Restore the branch
  3. Reopen the Pull Request
     • This will trigger the Github actions test to re run.
  4. Complete the PR review