commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From John Patrick <nhoj.patr...@gmail.com>
Subject Dependabot pr's
Date Wed, 14 Oct 2020 13:17:22 GMT
to shortcut multiple people telling me not to manually raise pr's to
upgrade dependencies, and dependabot is the preferred option for
commons to be raising these upgrades, and i should raise a pr to
enable dependabot.

so... here are all the pr's to enable dependabot on the repo's which
lack a dependabot.yml file.

https://github.com/apache/commons-bsf/pull/2
https://github.com/apache/commons-chain/pull/6
https://github.com/apache/commons-crypto/pull/108
https://github.com/apache/commons-daemon/pull/20
https://github.com/apache/commons-digester/pull/6
https://github.com/apache/commons-functor/pull/3
https://github.com/apache/commons-geometry/pull/102
https://github.com/apache/commons-jci/pull/3
https://github.com/apache/commons-jcs/pull/16
https://github.com/apache/commons-jelly/pull/7
https://github.com/apache/commons-jexl/pull/27
https://github.com/apache/commons-jxpath/pull/21
https://github.com/apache/commons-math/pull/160
https://github.com/apache/commons-numbers/pull/86
https://github.com/apache/commons-ognl/pull/10
https://github.com/apache/commons-proxy/pull/5
https://github.com/apache/commons-rng/pull/79
https://github.com/apache/commons-scxml/pull/9
https://github.com/apache/commons-statistics/pull/25
https://github.com/apache/commons-weaver/pull/5

They all have the change md5sum for .github/dependabot.yml which
matches the files in the other repos. I don't believe any other change
is required but i might be wrong.

John

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org


Mime
View raw message