In tobago there is npm inside as well and initial setup of dependabot makes a lot of noise
On Thu, Feb 11, 2021 at 8:49 PM Bill Lucy <wtl...@gmail.com> wrote: > I agree that dependabot is nice for general guidance, even if that > guidance is for dependencies we aren't providing at runtime. > > On Thu, Feb 11, 2021 at 11:36 AM Volodymyr Siedlecki < > volodymyr.siedle...@ibm.com> wrote: > >> Lot of emails from dependabot, however. >> >> >> ----- Original message ----- >> From: "Volodymyr Siedlecki" <volodymyr.siedle...@ibm.com> >> To: dev@myfaces.apache.org >> Cc: >> Subject: [EXTERNAL] RE: Dependabot config for MyFaces Core? >> Date: Wed, Feb 10, 2021 4:27 PM >> >> +1 >> >> I peeked around the Tobago GitHub page, and the dependabot feature looked >> pretty nice. >> I think some automation would be good to have -- would be easier for us >> to know which dependencies could/should be updated. >> >> Volodymyr >> >> >> >> >> ----- Original message ----- >> From: Bernd Bohmann <bernd.bohm...@googlemail.com> >> To: MyFaces Development <dev@myfaces.apache.org> >> Cc: >> Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core? >> Date: Wed, Feb 10, 2021 11:09 AM >> >> Maven plugins and Master pom updates as well? >> >> Of course we have dependencies. I don't want to go into this dependencies >> or not dependencies discussion. >> What I see is that many of the versions are outdated. I would take any >> automated help! >> >> Regards >> >> Bernd >> >> >> >> On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko < >> andraschko.tho...@gmail.com> wrote: >> >> +0 >> >> we dont have dependencies, only for testing and building >> and IMO the bot is only nice to get updates for real dependencies, which >> could contain fixes and security fixes >> >> Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann < >> bom...@apache.org>: >> >> Hello Team, >> >> any interest in adding dependabot configuration to MyFaces Core? >> >> I have added it to the Tobago and MyFaces Master Pom Projects. >> >> >> https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically >> <https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.github.com_en_github_administering-2Da-2Drepository_keeping-2Dyour-2Ddependencies-2Dupdated-2Dautomatically&d=DwMFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=QqfhAi_9Qi-cS9t9aiJ4in_uiKaPX12x3Ecmf1Ce6s0&m=P1azTpKi4ZdxsZ7JW6Pm3zsVuD90LdAIjG8rYDCBTQQ&s=f4jkcxrGpPL5UEvn0-NsLkSji5YVFn7XFa5oPJFEwhA&e=> >> >> Regards >> >> Bernd >> >> >> >> >> >>
