RE: Dependabot config for MyFaces Core?

[Volodymyr Siedlecki]

+1

I peeked around the Tobago GitHub page, and the dependabot feature looked pretty nice.
I think some automation would be good to have -- would be easier for us to know which dependencies could/should be updated.

Volodymyr

 

 

----- Original message -----
From: Bernd Bohmann <bernd.bohm...@googlemail.com>
To: MyFaces Development <dev@myfaces.apache.org>
Cc:
Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core?
Date: Wed, Feb 10, 2021 11:09 AM
 

Maven plugins and Master pom updates as well?

 

Of course we have dependencies. I don't want to go into this dependencies or not dependencies discussion.

What I see is that many of the versions are outdated. I would take any automated help!

 

Regards

 

Bernd

 

 

 

On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko <andraschko.tho...@gmail.com> wrote:

+0
 

we dont have dependencies, only for testing and building

and IMO the bot is only nice to get updates for real dependencies, which could contain fixes and security fixes

 

Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann <bom...@apache.org>:

Hello Team,

 

any interest in adding dependabot configuration to MyFaces Core?

 

I have added it to the Tobago and MyFaces Master Pom Projects.

 

https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically

 

Regards

 

Bernd