Yicong-Huang opened a new issue, #6847: URL: https://github.com/apache/texera/issues/6847
### Task Summary Switch dependency update automation from Dependabot to Renovate (Mend "Forking Renovate" app), following other ASF projects (Polaris, Fineract, JMeter, Solr). Motivations, in order: 1. PRs come from the bot's fork instead of branches in this repo. 2. Security-fix PRs can natively use a `fix(...)` conventional-commit prefix while routine bumps use `chore(...)` — impossible with Dependabot's per-ecosystem `commit-message.prefix`. 3. More flexible grouping (patch-level bumps grouped per area, security fixes kept as individual PRs). 4. Mature sbt support vs. Dependabot's beta. Plan: add `.github/renovate.json5` translating the current `dependabot.yml` semantics (weekly schedule, per-area patch groups, Angular-major exemption, per-area commit scopes), remove `dependabot.yml`, and ask INFRA to enable the Forking Renovate app for this repo. ### Task Type - [ ] Refactor / Cleanup - [X] DevOps / Deployment / CI - [ ] Testing / QA - [ ] Documentation - [ ] Performance - [ ] Other -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
