Hi Arnout,
On 10.02.2025 11:24, Arnout Engelen wrote:
That doesn't seem easy to automate,
though, and I'd say we don't want to add additional steps to the release
process either.
It is possible to automate (see [1] for example), but it requires a
workflow to run as `pull-request-target`. Alternatively we can do add
the entry automatically once the Dependabot PR has been merged, which
requires a bot to push commits to the main branch automatically.
There is no ideal solution as far as I know.
Piotr
[1]
https://github.com/apache/logging-parent/blob/main/.github/workflows/merge-dependabot-reusable.yaml
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org
