mbeckerle commented on PR #830: URL: https://github.com/apache/daffodil/pull/830#issuecomment-1218800591
> > A thought is that the dependency graph does not distinguish between main dependencies and test dependencies. Or I didn't see that at first glance. > > The dependency graph supports indicating whether a dependency is runtime or development, and that makes its way through to alerts. I can't say for sure whether the SBT action differentiates. https://github.blog/changelog/2022-06-23-dependabot-alerts-filter-alerts-by-the-scope-of-the-dependency-runtime-and-development/ Super. You are way ahead of me. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
