Enable dependabot updates for WB/WS (and group them)

[jeremywiebe]

Summary:

Juan and I were discussing keeping Perseus dependnecies up to date with webapp (especially WB and WS). This is a trial run to see if Dependabot will help us. It should open up a new PR any time WB or WS packages are released. And all WB or WS packages that received an update should be updated together in the same Perseus PR.

Issue: "none"

Test plan:

I suspect I'll need to land this and monitor it to test. Github action infra is notoriously difficult to test locally.

[github-actions]

npm Snapshot: Published

Good news!! We've packaged up the latest commit from this PR (706d132) and published it to npm. You
can install it using the tag PR1863.

Example:

yarn add @khanacademy/perseus@PR1863

If you are working in Khan Academy's webapp, you can run:

./dev/tools/bump_perseus_version.sh -t PR1863

[github-actions]

Size Change: -93 B (-0.01%)

Total Size: 1.29 MB

Filename	Size	Change
packages/perseus-editor/dist/es/index.js	699 kB	-93 B (-0.01%)

ℹ️ View Unchanged

Filename	Size
packages/kas/dist/es/index.js	38.9 kB
packages/keypad-context/dist/es/index.js	760 B
packages/kmath/dist/es/index.js	4.27 kB
packages/math-input/dist/es/index.js	77.8 kB
packages/math-input/dist/es/strings.js	1.79 kB
packages/perseus-core/dist/es/index.js	1.48 kB
packages/perseus-linter/dist/es/index.js	22.2 kB
packages/perseus/dist/es/index.js	421 kB
packages/perseus/dist/es/strings.js	3.55 kB
packages/pure-markdown/dist/es/index.js	3.66 kB
packages/simple-markdown/dist/es/index.js	12.4 kB

_{compressed-size-action}

[khan-actions-bot]

Gerald

Required Reviewers

• @Khan/perseus for changes to .eslintrc.js, .changeset/mighty-rules-talk.md, .github/dependabot.yml, packages/perseus-editor/src/components/widget-editor.tsx, packages/perseus-editor/src/components/__stories__/device-framer.stories.tsx

---

Don't want to be involved in this pull request? Comment #removeme and we won't notify you of further changes.

[jandrade]

Can we filter out certain packages? I'm asking as we have a couple of WB deprecated packages that we usually skip when upgrading webapp (wb-color and wb-spacing).

It would be nice if we could skip them programmatically with dependabot so we never see these packages in here, as it would be noisy/counterproductive to have them included.

[jeremywiebe]

We don't have any usages of wb-color nor wb-spacing in Perseus today. I can exclude them here, but I think I'm going to add an ESLint rule to ensure it doesn't come back. :)

    "no-restricted-imports": [
        "error",
        "@khanacademy/wonder-blocks-color",
        "@khanacademy/wonder-blocks-spacing",
    ],

[jandrade]

That sounds perfect, thanks!

[jandrade]

This is great! also the Lint rule is super useful (I'm going to replicate it in webapp). 🚀