ppkarwasz commented on PR #419: URL: https://github.com/apache/logging-parent/pull/419#issuecomment-4260430407
> I suggest adding a Groovy script to `gha/v0` that maintainers can run using a Maven profile inherited from `logging-parent` and pass it a Dependabot PR URL. For instance: > > ``` > ./mvnw -P generate-dependabot-changelog https://github.com/apache/logging-parent/pull/X > ``` On one side, I would like to generate changelogs manually, but on the other hand I don't want to do it, if the CI can. I wouldn't be too much concerned about using a PAT: we use reusable workflows after all and all secrets must be passed by the caller explicitly. The only workflow with access to the PAT will be `process-dependabot-reusable`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
