Thanks Gary and Sebb. How do I turn dependabot on? Last time I tried I was informed that due to the program requiring write permissions to the repository, it wasn’t possible… This policy must have changed… Thanks for any info. lewismc
On 2021/08/29 14:42:00 Gary Gregory wrote: > Most of Apache Common's components' are happy users of Dependabot, which is > used on our GitHub mirrored repositories. > > Gary > > > On Sun, Aug 29, 2021, 10:38 lewis john mcgibbney <lewi...@apache.org> wrote: > > > Hi builds@, > > I was advised to ask my question here instead of general@incubator. > > Thanks for any feedback > > > > > I understand that we cannot use automated tooling, specifically Dependbot > > ( > > > https://dependabot.com/) because it requests write access to the ASF > > > project source code. > > > I have found this functionality to be really useful and wondered if there > > > are any suggestions out there for automating the dependency management > > > workflow? > > > Thanks for any feedback. > > > lewismc > > -- > > http://home.apache.org/~lewismc/ > > http://people.apache.org/keys/committer/lewismc > > >
