On Tue, 3 Oct 2023 at 15:47, Emmanuel Bourg <ebo...@apache.org> wrote: > > Le 01/10/2023 à 14:09, sebb a écrit : > > As the subject says: how does one stop dependabot and other analyses > > from running on dormant components? > > +1 > > And even on all components, updating the dependencies is a release time > task. Updating 3 times the same Maven plugins between releases is a > waste of time.
+1000 Unfortunately it does not appear to be possible to trigger Dependabot checks manually. However, it is possible to reduce the frequency to monthly, which might reduce the churn somewhat. An alternative might be to disable the checks (e.g. by renaming the file), and re-enable with a suitable check date shortly before a release. > Emmanuel Bourg > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
