It would be a good idea if you enabled dependabot so you can monitor the versions of your dependencies (by having the bot submit PRs to update the dependency). Manual dependency monitoring is very annoying and time-consuming!
If you do this, you probably ought to also make development the primary branch (you do it in the Settings) as Dependabot really strongly prefers generating PRs that target the primary branch. That's a good idea anyway; that's the focus of development, whereas main is kinda vestigal at this point. (I personally recommend renaming main to release, but that's up to you.)
It would be a good idea if you enabled dependabot so you can monitor the versions of your dependencies (by having the bot submit PRs to update the dependency). Manual dependency monitoring is very annoying and time-consuming!
If you do this, you probably ought to also make
developmentthe primary branch (you do it in the Settings) as Dependabot really strongly prefers generating PRs that target the primary branch. That's a good idea anyway; that's the focus of development, whereasmainis kinda vestigal at this point. (I personally recommend renamingmaintorelease, but that's up to you.)