Feat: Create plugin should add a dependabot config to regularly update grafana-plugin-sdk-go package

[ivanahuckova]

Which areas does this feature request relate to

• Create Plugin
• Sign Plugin
• Plugin E2E
• Plugin Meta Extractor
• Documentation

Problem

We are adding to plugin repositories dependabot config that checks weekly, if grafana-plugin-sdk-go was updated and if so, creates a PR with updated version. This helps with making sure that plugins are up to date with new sdk, which currently is an issue.

Related to https://github.com/grafana/data-sources/issues/63

Solution

Example of the dependabot config: https://github.com/grafana/grafana-infinity-datasource/blob/main/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "gomod"
    directory: "/"
    schedule:
      interval: "weekly"
    allow:
      # Keep the sdk modules up-to-date
      - dependency-name: "github.com/grafana/grafana-plugin-sdk-go"
        dependency-type: "all"
    commit-message:
      prefix: "Upgrade grafana-plugin-sdk-go "
      include: "scope"

While here I am focusing on plugin-sdk, we could think further if there are other packages/dependencies, that we would like to regularly update.

[ivanahuckova]

fyi @aangelisc and @wbrowne

[tolzhabayev]

I think we should maybe consider looking into extending the grafana/create-plugin update command to also bump the SDK package and ran the update instead of dependabot.

[ivanahuckova]

I think we should maybe consider looking into extending the grafana/create-plugin update command to also bump the SDK package and ran the update instead of dependabot.

Great idea!

[grafana-plugins-platform-bot]

🚀 Issue was released in @grafana/create-plugin@5.4.0 🚀