Dependabot-like solution for Apache projects

2021-08-29 Thread lewis john mcgibbney
Hi builds@, I was advised to ask my question here instead of general@incubator. Thanks for any feedback > I understand that we cannot use automated tooling, specifically Dependbot ( > https://dependabot.com/) because it requests write access to the ASF > project source code. > I have found this fu

Re: Dependabot-like solution for Apache projects

2021-08-29 Thread Gary Gregory
Most of Apache Common's components' are happy users of Dependabot, which is used on our GitHub mirrored repositories. Gary On Sun, Aug 29, 2021, 10:38 lewis john mcgibbney wrote: > Hi builds@, > I was advised to ask my question here instead of general@incubator. > Thanks for any feedback > > >

Re: Dependabot-like solution for Apache projects

2021-08-29 Thread sebb
On Sun, 29 Aug 2021 at 15:42, Gary Gregory wrote: > > Most of Apache Common's components' are happy users of Dependabot, which is > used on our GitHub mirrored repositories. Not all the developers are happy however, as it generates lots and lots of mail traffic, as well as extra work. It has dou