Re: Dependabot config for MyFaces Core?
In tobago there is npm inside as well and initial setup of dependabot makes a lot of noise On Thu, Feb 11, 2021 at 8:49 PM Bill Lucy wrote: > I agree that dependabot is nice for general guidance, even if that > guidance is for dependencies we aren't providing at runtime. > > On Thu, Feb 11, 2021 at 11:36 AM Volodymyr Siedlecki < > volodymyr.siedle...@ibm.com> wrote: > >> Lot of emails from dependabot, however. >> >> >> - Original message - >> From: "Volodymyr Siedlecki" >> To: dev@myfaces.apache.org >> Cc: >> Subject: [EXTERNAL] RE: Dependabot config for MyFaces Core? >> Date: Wed, Feb 10, 2021 4:27 PM >> >> +1 >> >> I peeked around the Tobago GitHub page, and the dependabot feature looked >> pretty nice. >> I think some automation would be good to have -- would be easier for us >> to know which dependencies could/should be updated. >> >> Volodymyr >> >> >> >> >> - Original message - >> From: Bernd Bohmann >> To: MyFaces Development >> Cc: >> Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core? >> Date: Wed, Feb 10, 2021 11:09 AM >> >> Maven plugins and Master pom updates as well? >> >> Of course we have dependencies. I don't want to go into this dependencies >> or not dependencies discussion. >> What I see is that many of the versions are outdated. I would take any >> automated help! >> >> Regards >> >> Bernd >> >> >> >> On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko < >> andraschko.tho...@gmail.com> wrote: >> >> +0 >> >> we dont have dependencies, only for testing and building >> and IMO the bot is only nice to get updates for real dependencies, which >> could contain fixes and security fixes >> >> Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann < >> bom...@apache.org>: >> >> Hello Team, >> >> any interest in adding dependabot configuration to MyFaces Core? >> >> I have added it to the Tobago and MyFaces Master Pom Projects. >> >> >> https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically >> <https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.github.com_en_github_administering-2Da-2Drepository_keeping-2Dyour-2Ddependencies-2Dupdated-2Dautomatically=DwMFaQ=jf_iaSHvJObTbx-siA1ZOg=QqfhAi_9Qi-cS9t9aiJ4in_uiKaPX12x3Ecmf1Ce6s0=P1azTpKi4ZdxsZ7JW6Pm3zsVuD90LdAIjG8rYDCBTQQ=f4jkcxrGpPL5UEvn0-NsLkSji5YVFn7XFa5oPJFEwhA=> >> >> Regards >> >> Bernd >> >> >> >> >> >>
Re: Dependabot config for MyFaces Core?
I agree that dependabot is nice for general guidance, even if that guidance is for dependencies we aren't providing at runtime. On Thu, Feb 11, 2021 at 11:36 AM Volodymyr Siedlecki < volodymyr.siedle...@ibm.com> wrote: > Lot of emails from dependabot, however. > > > - Original message - > From: "Volodymyr Siedlecki" > To: dev@myfaces.apache.org > Cc: > Subject: [EXTERNAL] RE: Dependabot config for MyFaces Core? > Date: Wed, Feb 10, 2021 4:27 PM > > +1 > > I peeked around the Tobago GitHub page, and the dependabot feature looked > pretty nice. > I think some automation would be good to have -- would be easier for us to > know which dependencies could/should be updated. > > Volodymyr > > > > > - Original message ----- > From: Bernd Bohmann > To: MyFaces Development > Cc: > Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core? > Date: Wed, Feb 10, 2021 11:09 AM > > Maven plugins and Master pom updates as well? > > Of course we have dependencies. I don't want to go into this dependencies > or not dependencies discussion. > What I see is that many of the versions are outdated. I would take any > automated help! > > Regards > > Bernd > > > > On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko < > andraschko.tho...@gmail.com> wrote: > > +0 > > we dont have dependencies, only for testing and building > and IMO the bot is only nice to get updates for real dependencies, which > could contain fixes and security fixes > > Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann < > bom...@apache.org>: > > Hello Team, > > any interest in adding dependabot configuration to MyFaces Core? > > I have added it to the Tobago and MyFaces Master Pom Projects. > > > https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically > <https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.github.com_en_github_administering-2Da-2Drepository_keeping-2Dyour-2Ddependencies-2Dupdated-2Dautomatically=DwMFaQ=jf_iaSHvJObTbx-siA1ZOg=QqfhAi_9Qi-cS9t9aiJ4in_uiKaPX12x3Ecmf1Ce6s0=P1azTpKi4ZdxsZ7JW6Pm3zsVuD90LdAIjG8rYDCBTQQ=f4jkcxrGpPL5UEvn0-NsLkSji5YVFn7XFa5oPJFEwhA=> > > Regards > > Bernd > > > > > >
RE: Dependabot config for MyFaces Core?
Lot of emails from dependabot, however. - Original message -From: "Volodymyr Siedlecki" To: dev@myfaces.apache.orgCc:Subject: [EXTERNAL] RE: Dependabot config for MyFaces Core?Date: Wed, Feb 10, 2021 4:27 PM +1I peeked around the Tobago GitHub page, and the dependabot feature looked pretty nice.I think some automation would be good to have -- would be easier for us to know which dependencies could/should be updated.Volodymyr - Original message -From: Bernd Bohmann To: MyFaces Development Cc:Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core?Date: Wed, Feb 10, 2021 11:09 AM Maven plugins and Master pom updates as well? Of course we have dependencies. I don't want to go into this dependencies or not dependencies discussion. What I see is that many of the versions are outdated. I would take any automated help! Regards Bernd On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko <andraschko.tho...@gmail.com> wrote: +0 we dont have dependencies, only for testing and buildingand IMO the bot is only nice to get updates for real dependencies, which could contain fixes and security fixes Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann <bom...@apache.org>: Hello Team, any interest in adding dependabot configuration to MyFaces Core? I have added it to the Tobago and MyFaces Master Pom Projects. https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically Regards Bernd
RE: Dependabot config for MyFaces Core?
+1I peeked around the Tobago GitHub page, and the dependabot feature looked pretty nice.I think some automation would be good to have -- would be easier for us to know which dependencies could/should be updated.Volodymyr - Original message -From: Bernd Bohmann To: MyFaces Development Cc:Subject: [EXTERNAL] Re: Dependabot config for MyFaces Core?Date: Wed, Feb 10, 2021 11:09 AM Maven plugins and Master pom updates as well? Of course we have dependencies. I don't want to go into this dependencies or not dependencies discussion. What I see is that many of the versions are outdated. I would take any automated help! Regards Bernd On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko <andraschko.tho...@gmail.com> wrote: +0 we dont have dependencies, only for testing and buildingand IMO the bot is only nice to get updates for real dependencies, which could contain fixes and security fixes Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann <bom...@apache.org>: Hello Team, any interest in adding dependabot configuration to MyFaces Core? I have added it to the Tobago and MyFaces Master Pom Projects. https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically Regards Bernd
Re: Dependabot config for MyFaces Core?
Maven plugins and Master pom updates as well? Of course we have dependencies. I don't want to go into this dependencies or not dependencies discussion. What I see is that many of the versions are outdated. I would take any automated help! Regards Bernd On Wed, Feb 10, 2021 at 4:46 PM Thomas Andraschko < andraschko.tho...@gmail.com> wrote: > +0 > > we dont have dependencies, only for testing and building > and IMO the bot is only nice to get updates for real dependencies, which > could contain fixes and security fixes > > Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann < > bom...@apache.org>: > >> Hello Team, >> >> any interest in adding dependabot configuration to MyFaces Core? >> >> I have added it to the Tobago and MyFaces Master Pom Projects. >> >> >> https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically >> >> Regards >> >> Bernd >> >
Re: Dependabot config for MyFaces Core?
+0 we dont have dependencies, only for testing and building and IMO the bot is only nice to get updates for real dependencies, which could contain fixes and security fixes Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann : > Hello Team, > > any interest in adding dependabot configuration to MyFaces Core? > > I have added it to the Tobago and MyFaces Master Pom Projects. > > > https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically > > Regards > > Bernd >
Dependabot config for MyFaces Core?
Hello Team, any interest in adding dependabot configuration to MyFaces Core? I have added it to the Tobago and MyFaces Master Pom Projects. https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically Regards Bernd
