Hi builds@,
I was advised to ask my question here instead of general@incubator.
Thanks for any feedback
> I understand that we cannot use automated tooling, specifically Dependbot
(
> https://dependabot.com/) because it requests write access to the ASF
> project source code.
> I have found this fu
Most of Apache Common's components' are happy users of Dependabot, which is
used on our GitHub mirrored repositories.
Gary
On Sun, Aug 29, 2021, 10:38 lewis john mcgibbney wrote:
> Hi builds@,
> I was advised to ask my question here instead of general@incubator.
> Thanks for any feedback
>
> >
On Sun, 29 Aug 2021 at 15:42, Gary Gregory wrote:
>
> Most of Apache Common's components' are happy users of Dependabot, which is
> used on our GitHub mirrored repositories.
Not all the developers are happy however, as it generates lots and
lots of mail traffic, as well as extra work.
It has dou