I agree that dependabot is nice for general guidance, even if that guidance is for dependencies we aren't providing at runtime.
On Thu, Feb 11, 2021 at 11:36 AM Volodymyr Siedlecki < volodymyr.siedle...@ibm.com> wrote: > Lot of emails from dependabot, however. > > > ----- Original message ----- > From: "Volodymyr Siedlecki" <volodymyr.siedle...@ibm.com> > To: dev@myfaces.apache.org > Cc: > Subject: [EXTERNAL] RE: Dependabot config for MyFaces Core? > Date: Wed, Feb 10, 2021 4:27 PM > > +1 > > I peeked around the Tobago GitHub page, and the dependabot feature looked > pretty nice. > I think some automation would be good to have -- would be easier for us to > know which dependencies could/should be updated. > > Volodymyr > > > > > ----- Original message ----- > From: Bernd Bohmann <bernd.bohm...@googlemail.com> > To: MyFaces Development <dev@myfaces.apache.org> > Cc: > Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core? > Date: Wed, Feb 10, 2021 11:09 AM > > Maven plugins and Master pom updates as well? > > Of course we have dependencies. I don't want to go into this dependencies > or not dependencies discussion. > What I see is that many of the versions are outdated. I would take any > automated help! > > Regards > > Bernd > > > > On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko < > andraschko.tho...@gmail.com> wrote: > > +0 > > we dont have dependencies, only for testing and building > and IMO the bot is only nice to get updates for real dependencies, which > could contain fixes and security fixes > > Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann < > bom...@apache.org>: > > Hello Team, > > any interest in adding dependabot configuration to MyFaces Core? > > I have added it to the Tobago and MyFaces Master Pom Projects. > > > https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically > <https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.github.com_en_github_administering-2Da-2Drepository_keeping-2Dyour-2Ddependencies-2Dupdated-2Dautomatically&d=DwMFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=QqfhAi_9Qi-cS9t9aiJ4in_uiKaPX12x3Ecmf1Ce6s0&m=P1azTpKi4ZdxsZ7JW6Pm3zsVuD90LdAIjG8rYDCBTQQ&s=f4jkcxrGpPL5UEvn0-NsLkSji5YVFn7XFa5oPJFEwhA&e=> > > Regards > > Bernd > > > > > >
