On Tue, 3 Oct 2023 at 15:47, Emmanuel Bourg <[email protected]> wrote: > > Le 01/10/2023 à 14:09, sebb a écrit : > > As the subject says: how does one stop dependabot and other analyses > > from running on dormant components? > > +1 > > And even on all components, updating the dependencies is a release time > task. Updating 3 times the same Maven plugins between releases is a > waste of time.
+1000 Unfortunately it does not appear to be possible to trigger Dependabot checks manually. However, it is possible to reduce the frequency to monthly, which might reduce the churn somewhat. An alternative might be to disable the checks (e.g. by renaming the file), and re-enable with a suitable check date shortly before a release. > Emmanuel Bourg > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
