On Wed, Sep 16, 2020 at 7:10 PM Rob Tompkins <chtom...@gmail.com> wrote: > > > > > On Sep 16, 2020, at 4:43 PM, Gary Gregory <garydgreg...@gmail.com> wrote: > > > > On Wed, Sep 16, 2020 at 4:25 PM Gilles Sadowski <gillese...@gmail.com> > > wrote: > >> > >>> Le mer. 16 sept. 2020 à 21:09, Gary Gregory <garydgreg...@gmail.com> a > >>> écrit : > >>> > >>> I think we really want the PRs, the main benefit is to have the software > >>> built and tested WITH the dependency update, that is a huge time saver. > >> > >> Yes, but the bot should submit the PR only when asked by a human, > >> at times where it brings some value. > >> There is no value in trying all the versions of all the plugins. > > > > I disagree there. > > > > Upon reflection and current experience, I want all of Dependabot minus > > the emails. > > The dependabot emails are a symptom to the real problem at hand. We have > quite a lot of large code bases. If the general populous was interested in > the project, we would similarly get an overwhelming volume of email. > > I don’t have a good answer here because I’m honestly trying to think of the > bot as an actual person trying to do legitimate development. If we had a > person making such a large volume of reasonable pull requests, would we not > bring them in as a committer and ask them to make direct commits? Why not let > dependabot loose directly on the top level branches of each project? Then > we’d get straight commit emails as opposed to this volume of pull requests > which I agree is annoying.
I like the idea of considering Dependabot as a helpful and diligent user but it does not solve what we are struggling with here IMO and at least for me. Even if I consider Dependabot a "user", and this goes for real GitHub and Apache users, PRs from any author must be reviewed by a human before merging. For me, the PRs are key and not annoying, it's the emails that I've grown to see as noisy. I prefer to go and look at various components on GitHub from time to time and look at PRs, from Dependabot or other sources. Gary > > Thoughts? > > -Rob > > > > > > Gary > > > >> > >> Gilles > >> > >>>>> [...] > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> For additional commands, e-mail: dev-h...@commons.apache.org > >> > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > > For additional commands, e-mail: dev-h...@commons.apache.org > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
