-1 as is: Dependabot is only helpful if you have a GitHub Action build to verify that the update did not break anything. I'm not really paying attention to Travis CI these days but even this list contains components without a GHA or a TCI build. FYI I just added a GHA build to BSF.
I have a separate thread from a while back to drop Travis CI in favor of GitHub actions. Gary On Wed, Oct 14, 2020 at 9:17 AM John Patrick <nhoj.patr...@gmail.com> wrote: > to shortcut multiple people telling me not to manually raise pr's to > upgrade dependencies, and dependabot is the preferred option for > commons to be raising these upgrades, and i should raise a pr to > enable dependabot. > > so... here are all the pr's to enable dependabot on the repo's which > lack a dependabot.yml file. > > https://github.com/apache/commons-bsf/pull/2 > https://github.com/apache/commons-chain/pull/6 > https://github.com/apache/commons-crypto/pull/108 > https://github.com/apache/commons-daemon/pull/20 > https://github.com/apache/commons-digester/pull/6 > https://github.com/apache/commons-functor/pull/3 > https://github.com/apache/commons-geometry/pull/102 > https://github.com/apache/commons-jci/pull/3 > https://github.com/apache/commons-jcs/pull/16 > https://github.com/apache/commons-jelly/pull/7 > https://github.com/apache/commons-jexl/pull/27 > https://github.com/apache/commons-jxpath/pull/21 > https://github.com/apache/commons-math/pull/160 > https://github.com/apache/commons-numbers/pull/86 > https://github.com/apache/commons-ognl/pull/10 > https://github.com/apache/commons-proxy/pull/5 > https://github.com/apache/commons-rng/pull/79 > https://github.com/apache/commons-scxml/pull/9 > https://github.com/apache/commons-statistics/pull/25 > https://github.com/apache/commons-weaver/pull/5 > > They all have the change md5sum for .github/dependabot.yml which > matches the files in the other repos. I don't believe any other change > is required but i might be wrong. > > John > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > >
