ppkarwasz opened a new pull request, #419:
URL: https://github.com/apache/logging-parent/pull/419
This PR introduces a **reusable GitHub Actions workflow**,
`process-dependabot-reusable`, designed to streamline the handling of
Dependabot pull requests across repositories — implemented entirely with
**shell scripts**.
This serves as a Bash-based alternative to #418, which uses TypeScript.
### 🔄 Key Differences from #418
* **Trigger**: Runs on `pull_request_target` (not `push`), which is required
by the `dependabot/fetch-metadata` action.
* **Implementation**: Written using **standard POSIX tools** with a few
dependencies:
* **`bash`** – some Bash-specific constructs are used
* **`jq`** – for processing JSON output from `dependabot/fetch-metadata`
* **`xmlstarlet`** – for parsing `pom.xml` and generating a changelog XML
file
* **`git`** – to commit and push any changes
* **`gh`** – to enable "auto-merge" on the pull request
This approach avoids the Node.js/TypeScript toolchain and relies only on
standard CLI tools commonly available in CI environments.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
