vy commented on PR #419:
URL: https://github.com/apache/logging-parent/pull/419#issuecomment-4259757813
> A Personal Access Token (PAT) with `contents:write` permission must be
provided instead.
@ppkarwasz, would you mind explaining how do we do that, please? Do we
create an INFRA ticket?
> I'm genuinely happy to look at alternative proposals
I suggest adding a Groovy script to `gha/v0` that maintainers can run using
a Maven profile inherited from `logging-parent` and pass it a Dependabot PR
URL. For instance:
./mvnw -P generate-dependabot-changelog
https://github.com/apache/logging-parent/pull/X
This will
1. Checkout to the associated PR branch
2. Generate changelog entries
Consequently, the maintainer can review these changes, commit, and push
them. Since the commits will be originating from a maintainer, the CI will run
without any extra permissions, PAT tokens, etc.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
