Look into "depenabot" for pre-commit

[PGijsbers]

See #1150, it might be useful to have some automation which can bump the versions for the pre-commit dependencies and automatically notify us of this. We should look at how easy this is to set up (dependabotmight be helpful, since it serves a similar purpose), and if it's worth pursuing (caveats mentioned in the PR).

[eddiebergman]

Hi @PGijsbers CC @mfeurer,

I looked into it and there's 2 solutions, one automatic and one manual:

1. Use a github workflow that will run everyday and create a PR if it needs updating
2. Run pre-commit autoupdate on your local code and it will check for updates and apply accordingly, at which point you can manually make a PR.

I checked dependabot and it doesn't seem supported or on their roadmap.

There's a PR for 1. at #1154 if you want, feel free to close if it's not :)

Best,
Eddie

[mfeurer]

This is now enabled, see 1250 as an example.