Re: [prometheus-developers] Enable Dependabot on prometheus repos

[guggenm...@gmail.com]

With Go the dependabot experience indeed isn't that great yet, since 
vendoring and automatically running go mod clean after every update are not 
supported yet.
syl...@abstraction.fr schrieb am Montag, 8. Juni 2020 um 15:08:50 UTC+2:

> It is as long as you don’t vendor deps.
>
> > On 8 Jun 2020, at 14:10, Simon Pasquier  wrote:
> > 
> > +1 for the React codebase.
> > FWIW last time I looked at it, dependabot wasn't really ready for
> > managing Go dependencies.
> > 
> >> On Mon, Jun 8, 2020 at 7:11 AM Julien Pivotto
> >>  wrote:
> >> 
> >> I +1 this
> >> 
> >>> Le lun. 8 juin 2020 à 07:09, Ben Kochie  a écrit :
> >>> 
> >>> I'd like to enable Dependabot on prometheus/prometheus, specifically 
> to automatically handle the React UI version bumps. This will deal with the 
> small version bumps for all the random security vulnerabilities that pop up.
> >>> 
> >>> The bot will create PRs like this one:
> >>> 
> >>> https://github.com/prometheus-community/monaco-promql/pull/12
> >>> 
> >>> --
> >>> You received this message because you are subscribed to the Google 
> Groups "Prometheus Developers" group.
> >>> To unsubscribe from this group and stop receiving emails from it, send 
> an email to prometheus-devel...@googlegroups.com.
> >>> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com
> .
> >> 
> >> --
> >> You received this message because you are subscribed to the Google 
> Groups "Prometheus Developers" group.
> >> To unsubscribe from this group and stop receiving emails from it, send 
> an email to prometheus-devel...@googlegroups.com.
> >> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com
> .
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups "Prometheus Developers" group.
> > To unsubscribe from this group and stop receiving emails from it, send 
> an email to prometheus-devel...@googlegroups.com.
> > To view this discussion on the web visit 
> https://groups.google.com/d/msgid/prometheus-developers/CAM6RFu4zFvwzS1DB9O8eUEoHikukX5fape9p9s6%2BFi66ycSxkw%40mail.gmail.com
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/970f1847-05cc-4eb6-b541-e9c27ab67c03n%40googlegroups.com.

Re: [prometheus-developers] Enable Dependabot on prometheus repos

[Sylvain Rabot]

It is as long as you don’t vendor deps.

> On 8 Jun 2020, at 14:10, Simon Pasquier  wrote:
> 
> +1 for the React codebase.
> FWIW last time I looked at it, dependabot wasn't really ready for
> managing Go dependencies.
> 
>> On Mon, Jun 8, 2020 at 7:11 AM Julien Pivotto
>>  wrote:
>> 
>> I +1 this
>> 
>>> Le lun. 8 juin 2020 à 07:09, Ben Kochie  a écrit :
>>> 
>>> I'd like to enable Dependabot on prometheus/prometheus, specifically to 
>>> automatically handle the React UI version bumps. This will deal with the 
>>> small version bumps for all the random security vulnerabilities that pop up.
>>> 
>>> The bot will create PRs like this one:
>>> 
>>> https://github.com/prometheus-community/monaco-promql/pull/12
>>> 
>>> --
>>> You received this message because you are subscribed to the Google Groups 
>>> "Prometheus Developers" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>> email to prometheus-developers+unsubscr...@googlegroups.com.
>>> To view this discussion on the web visit 
>>> https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com.
>> 
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "Prometheus Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to prometheus-developers+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com.
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Prometheus Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to prometheus-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/prometheus-developers/CAM6RFu4zFvwzS1DB9O8eUEoHikukX5fape9p9s6%2BFi66ycSxkw%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/CE29ECDF-675F-4174-BCAB-66E3C69747FB%40abstraction.fr.

Re: [prometheus-developers] Enable Dependabot on prometheus repos

[Simon Pasquier]

+1 for the React codebase.
FWIW last time I looked at it, dependabot wasn't really ready for
managing Go dependencies.

On Mon, Jun 8, 2020 at 7:11 AM Julien Pivotto
 wrote:
>
> I +1 this
>
> Le lun. 8 juin 2020 à 07:09, Ben Kochie  a écrit :
>>
>> I'd like to enable Dependabot on prometheus/prometheus, specifically to 
>> automatically handle the React UI version bumps. This will deal with the 
>> small version bumps for all the random security vulnerabilities that pop up.
>>
>> The bot will create PRs like this one:
>>
>> https://github.com/prometheus-community/monaco-promql/pull/12
>>
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "Prometheus Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to prometheus-developers+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Prometheus Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to prometheus-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/CAM6RFu4zFvwzS1DB9O8eUEoHikukX5fape9p9s6%2BFi66ycSxkw%40mail.gmail.com.

Re: [prometheus-developers] Enable Dependabot on prometheus repos

[Julien Pivotto]

I +1 this

Le lun. 8 juin 2020 à 07:09, Ben Kochie  a écrit :

> I'd like to enable Dependabot on prometheus/prometheus, specifically to
> automatically handle the React UI version bumps. This will deal with the
> small version bumps for all the random security vulnerabilities that pop up.
>
> The bot will create PRs like this one:
>
> https://github.com/prometheus-community/monaco-promql/pull/12
>
> --
> You received this message because you are subscribed to the Google Groups
> "Prometheus Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to prometheus-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com.

[prometheus-developers] Enable Dependabot on prometheus repos

[Ben Kochie]

I'd like to enable Dependabot on prometheus/prometheus, specifically to
automatically handle the React UI version bumps. This will deal with the
small version bumps for all the random security vulnerabilities that pop up.

The bot will create PRs like this one:

https://github.com/prometheus-community/monaco-promql/pull/12

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to prometheus-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com.