This is an automated email from the ASF dual-hosted git repository.
github-actions[bot] pushed a commit to branch main-site-stg-out
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
The following commit(s) were added to refs/heads/main-site-stg-out by this push:
new aa74d4b Add website content generated from
`2d294d41e966e745062ffa2aea300060aab49ccc`
aa74d4b is described below
commit aa74d4bf363f31210f73010c7c5bb42d8ddb4d56
Author: ASF Logging Services RM <[email protected]>
AuthorDate: Sat May 2 19:37:27 2026 +0000
Add website content generated from
`2d294d41e966e745062ffa2aea300060aab49ccc`
---
release-notes.html | 10 +++++
sitemap.xml | 16 +++----
workflows.html | 125 +++++++++++++++++++++++++++++++++++++++++++++++++++++
3 files changed, 143 insertions(+), 8 deletions(-)
diff --git a/release-notes.html b/release-notes.html
index b2a390e..6e360a1 100644
--- a/release-notes.html
+++ b/release-notes.html
@@ -124,6 +124,16 @@
<p>This minor release contains several small improvements.</p>
</div>
<div class="sect2">
+<h3 id="release-notes-12-x-x-added"><a class="anchor"
href="#release-notes-12-x-x-added"></a>Added</h3>
+<div class="ulist">
+<ul>
+<li>
+<p>Added <code>process-dependabot-reusable</code> to handle Dependabot PRs
under RTC restrictions. (<a
href="https://github.com/apache/logging-parent/issues/417";>417</a>)</p>
+</li>
+</ul>
+</div>
+</div>
+<div class="sect2">
<h3 id="release-notes-12-x-x-changed"><a class="anchor"
href="#release-notes-12-x-x-changed"></a>Changed</h3>
<div class="ulist">
<ul>
diff --git a/sitemap.xml b/sitemap.xml
index 21df76e..8ded96e 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -2,34 +2,34 @@
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";>
<url>
<loc>https://logging.apache.org/logging-parent/features.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/index.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/release-instructions-project.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/release-instructions-xml-schema.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/release-notes.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/release-review-instructions.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/usage.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
<url>
<loc>https://logging.apache.org/logging-parent/workflows.html</loc>
-<lastmod>2026-05-02T17:54:29.201Z</lastmod>
+<lastmod>2026-05-02T19:37:25.606Z</lastmod>
</url>
</urlset>
diff --git a/workflows.html b/workflows.html
index f87fd2b..08ddfd8 100644
--- a/workflows.html
+++ b/workflows.html
@@ -295,6 +295,131 @@
</div>
</div>
<div class="sect1">
+<h2 id="analyze-dependabot"><a class="anchor"
href="#analyze-dependabot"></a><a
href="https://github.com/apache/logging-parent/blob/gha/v0/.github/workflows/analyze-dependabot-reusable.yaml";><code>analyze-dependabot-reusable.yaml</code></a></h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>Analyzes Dependabot pull requests to collect detailed information about
updated dependencies.
+Stores the results in the <code>dependabot-metadata</code> artifact,
+which is later consumed by the <a
href="#process-dependabot"><code>process-dependabot-reusable.yaml</code></a>
workflow to automate changelog generation and PR processing.</p>
+</div>
+<div class="admonitionblock note">
+<table>
+<tr>
+<td class="icon">
+<i class="fa icon-note" title="Note"></i>
+</td>
+<td class="content">
+<div class="paragraph">
+<p>This workflow must be triggered by an event that includes the
<code>pull_request</code> payload and does not require any privileges.
+It can then be used in a <code>pull_request</code> workflow.</p>
+</div>
+</td>
+</tr>
+</table>
+</div>
+<div class="listingblock">
+<div class="title">Snippet from an <a
href="https://github.com/apache/logging-parent/tree/main/src/site/antora/modules/ROOT/examples/analyze-dependabot.yaml";>example
<code>analyze-dependabot.yaml</code></a> using this workflow</div>
+<div class="content">
+<pre class="highlightjs highlight"><code class="language-yaml hljs"
data-lang="yaml">analyze-dependabot:
+ # `github.actor` prevents recursive calls when `github-actions[bot]` pushes
to the PR;
+ # `github.event.pull_request.user.login` skips PRs not opened by Dependabot.
+ if: ${{
+ github.repository == 'apache/logging-parent'
+ && github.actor == 'dependabot[bot]'
+ && github.event.pull_request.user.login == 'dependabot[bot]'
+ }}
+ uses:
apache/logging-parent/.github/workflows/analyze-dependabot-reusable.yaml@gha/v0</code></pre>
+</div>
+</div>
+</div>
+</div>
+<div class="sect1">
+<h2 id="process-dependabot"><a class="anchor"
href="#process-dependabot"></a><a
href="https://github.com/apache/logging-parent/blob/gha/v0/.github/workflows/process-dependabot-reusable.yaml";><code>process-dependabot-reusable.yaml</code></a></h2>
+<div class="sectionbody">
+<div class="paragraph">
+<p>Helps to process Dependabot pull requests by:</p>
+</div>
+<div class="ulist">
+<ul>
+<li>
+<p>Generating changelog entries for the updated dependencies.</p>
+</li>
+<li>
+<p>Enabling the "auto-merge" option for the pull request.</p>
+</li>
+</ul>
+</div>
+<div class="paragraph">
+<p>The workflow needs the following privileged tokens:</p>
+</div>
+<div class="dlist">
+<dl>
+<dt class="hdlist1"><code>GITHUB_TOKEN</code></dt>
+<dd>
+<p>The default GitHub token with <code>contents:write</code> and
<code>pull-requests: write</code> permissions,
+used to enable auto-merge on pull requests.</p>
+<div class="paragraph">
+<p>This token is automatically provided by GitHub Actions, but needs to be
configured in the <code>permissions</code> property.</p>
+</div>
+</dd>
+<dt class="hdlist1"><code>RECURSIVE_TOKEN</code></dt>
+<dd>
+<p>A GitHub token required to push generated changelog files as a new commit
to the repository.
+The default <code>GITHUB_TOKEN</code> can <strong>not</strong> be used,
+as it will not trigger required check runs and will prevent the pull request
from being merged.
+A Personal Access Token (PAT) with <code>contents:write</code> permission must
be provided instead.</p>
+<div class="paragraph">
+<p>The token must be passed as a secret named <code>RECURSIVE_TOKEN</code>.</p>
+</div>
+</dd>
+</dl>
+</div>
+<div class="paragraph">
+<p>This workflow is designed to be triggered by the <code>workflow_run</code>
event,
+as soon as the <a
href="#analyze-dependabot"><code>analyze-dependabot-reusable.yaml</code></a>
workflow completes.</p>
+</div>
+<div class="admonitionblock note">
+<table>
+<tr>
+<td class="icon">
+<i class="fa icon-note" title="Note"></i>
+</td>
+<td class="content">
+<div class="paragraph">
+<p>When this workflow is triggered by <code>workflow_run</code>,
+GitHub Actions uses the "Actions" secret context instead of "Dependabot"
secrets,
+even if the <code>github.actor</code> is <code>dependabot[bot]</code>.</p>
+</div>
+</td>
+</tr>
+</table>
+</div>
+<div class="listingblock">
+<div class="title">Snippet from an <a
href="https://github.com/apache/logging-parent/tree/main/src/site/antora/modules/ROOT/examples/process-dependabot.yaml";>example
<code>process-dependabot.yaml</code></a> using this workflow</div>
+<div class="content">
+<pre class="highlightjs highlight"><code class="language-yaml hljs"
data-lang="yaml">process-dependabot:
+ # Skip this workflow on commits not pushed by Dependabot
+ if: ${{
+ github.repository == 'apache/logging-parent'
+ && github.actor == 'dependabot[bot]'
+ && github.event.workflow_run.conclusion == 'success'
+ }}
+ uses:
apache/logging-parent/.github/workflows/process-dependabot-reusable.yaml@gha/v0
+ permissions:
+ # The default GITHUB_TOKEN will be used to enable the "auto-merge" on the
PR
+ # This requires the following two permissions:
+ contents: write
+ pull-requests: write
+ secrets:
+ RECURSIVE_TOKEN: ${{ secrets.DEPENDABOT_TOKEN }}
+ with:
+ # The path to the changelog directory for the current development branch.
+ changelog-path: src/changelog/.2.x.x</code></pre>
+</div>
+</div>
+</div>
+</div>
+<div class="sect1">
<h2 id="deploy-site"><a class="anchor" href="#deploy-site"></a><a
href="https://github.com/apache/logging-parent/blob/gha/v0/.github/workflows/deploy-site-reusable.yaml";><code>deploy-site-reusable.yaml</code></a></h2>
<div class="sectionbody">
<div class="paragraph">
