Re: Dependabot-like solution for Apache projects

2021-08-31 Thread David Jencks
dependabot can currently do this. It would certainly create less noise in the Apache repo. David Jencks > On Aug 31, 2021, at 12:33 PM, Gary Gregory wrote: > > I am missing something here: the whole point of dependabot is that it > creates a branch in GitHub, runs a build, and creates

Re: Dependabot-like solution for Apache projects

2021-09-02 Thread David Jencks
I’m not sure what the target of the dependabot PR would be or, if it’s the fork, how hard it would be to make a PR to the Apache repo. 4. Do something to apply the dependabot PR/changes to the apache repo. David Jencks > On Sep 2, 2021, at 2:48 PM, Olivier Lamy wrote: > > Hi, >

Re: Dependabot-like solution for Apache projects

2021-09-02 Thread David Jencks
committer: also infra restricts which branch(es) the Jenkins script commits to. David Jencks > On Sep 2, 2021, at 4:16 PM, Olivier Lamy wrote: > > So what happen here? > If I understand correctly dependabot creates a branch in a fork repository > with a commit then this commit is

Re: Dependabot-like solution for Apache projects

2021-09-02 Thread David Jencks
nario 2 Arthur does. The result is the same!! (at least the resulting code is the same, there will be some difference in the fields in the commit) So should we allow scenario 2? David Jencks > On Sep 2, 2021, at 4:42 PM, Olivier Lamy wrote: > > I perfectly understand this. > Bu