janhoy opened a new pull request, #1375: URL: https://github.com/apache/solr/pull/1375
This PR adds automatic dependency housekeeping to the project through [Renovatebot](https://github.com/renovatebot/renovate), which is an alternative to dependabot. See [slack discussion here](https://the-asf.slack.com/archives/CEKUCUNE9/p1674220374400369). So once this is merged, a self-hosted bot called [SolrBot](https://github.com/solrbot), will kick off every Sunday and file PRs for dependencies that need upgrades. Here is an [example of such a PR](https://github.com/cominvent/solr-playground/pull/83) from my sandbox test project. A nice feature is that the PR will also include changes from `gradlew updateLicenses` and `--write-locks`, so for a majority of upgrades, there's nothing left to do for the committer. We can't use Dependabot since it does not support our gradle "consistent-versions" plugin. We can't use the public Renovatebot github app since it cannot be configured to run custom post-commands like `gradlew updateLicenses`. So we follow GitHub's advice of creating a custom github account for the bot, and that user will run renovatebot in a GitHub Action, and fork the solr repo and file PRs against the Solr repo. This has the nice property that the bot won't need commit-rights to the solr-repo, which would be disallowed by ASF policy. I plan to share the github credentials for the [SolrBot](https://github.com/solrbot) account with the PMC if I can find a secure way of doing it. I remember there is a private svn repo per PMC, but could not find it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org
