These have all been addressed. I went through and merged all of them, except for the slf4j-jdk14 dependency in Java and Kotlin. After consulting with Luke [1] I told dependabot to ignore this dependency.
[1] https://github.com/apache/beam-starter-java/pull/26#issuecomment-130263Java9941 <https://github.com/apache/beam-starter-java/pull/26#issuecomment-1302639941> On Wed, Nov 2, 2022 at 10:58 AM David Cavazos <dcava...@google.com> wrote: > Hi, I just opened some PRs to auto-assign dependabot PRs. > > Java: https://github.com/apache/beam-starter-java/pull/29 > Python: https://github.com/apache/beam-starter-python/pull/11 > Go: https://github.com/apache/beam-starter-go/pull/7 > Kotlin: https://github.com/apache/beam-starter-kotlin/pull/9 > > For the existing dependabot PRs, can someone help me batch merge them? All > tests are passing on all of them, so they should all be safe to merge. > > On Thu, Oct 27, 2022 at 1:56 PM Brian Hulette <bhule...@google.com> wrote: > >> Could we just use the same set of reviewers as pr-bot in the main repo >> [1]? I don't think that we could avoid duplicating the data though. >> >> [1] >> https://github.com/apache/beam/blob/728e8ecc8a40d3d578ada7773b77eca2b3c68d03/.github/REVIEWERS.yml >> >> On Thu, Oct 27, 2022 at 12:20 PM David Cavazos via dev < >> dev@beam.apache.org> wrote: >> >>> Hi everyone! >>> >>> We want to make sure the Beam starter projects always come with the >>> latest (compatible) versions for every dependency. I enabled Dependabot on >>> all of them to automate this as much as possible, and we have automated >>> tests to make sure everything works as expected. >>> >>> However, we still need someone to merge Dependabot's PRs. The good news >>> is that since the starter projects are so simple, if tests pass they're >>> most likely safe to merge, and tests only take a couple minutes to run. >>> >>> We could either batch update all dependencies as part of the release >>> process, or have people check them periodically (like an owner per >>> language). >>> >>> These are all the repos we have to keep an eye to: >>> >>> - https://github.com/apache/beam-starter-java -- 9 updates, all >>> tests passing >>> - https://github.com/apache/beam-starter-python -- 2 updates, all >>> tests passing >>> - https://github.com/apache/beam-starter-go -- 0 updates >>> - https://github.com/apache/beam-starter-kotlin -- 3 updates, all >>> tests passing >>> - https://github.com/apache/beam-starter-scala -- not done yet, but >>> keep an eye >>> >>>
