Ah yes, branches are being synced over, of course. On GitHub, just go to the Pull Requests tab and either merge them or close them. There is not much more to it.
If you are not a committer, you can safely ignore them. You probably have googled dependabot at this point, but just in case here is a quick overview: https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/ On Thu, 3 Jun 2021, 19:43 Gilles Sadowski, <[email protected]> wrote: > Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <[email protected]> a > écrit : > > > > It's a bot which creates a PR on GitHub for each dependency update. > > > > You won't see it in the Apache git probably. > > They are listed as "origin" which is the ASF repository: > $ git remote -v > github https://github.com/apache/commons-geometry.git (fetch) > github https://github.com/apache/commons-geometry.git (push) > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch) > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push) > > And some of the branches (why not all?) are listed here: > https://gitbox.apache.org/repos/asf?p=commons-geometry.git > > > > > You can disable the bot using a config file or exclude some dependencies > > etc. > > Indeed, is this intended or is there a misconfiguration somewhere? > > > Gilles > > > > > Most projects use it by now, but often major updates are being closed and > > manually updated instead. > > > > > > On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <[email protected]> wrote: > > > > > Hello. > > > > > > What's the purpose of all those "dependabot" branches? > > > > > > $ git branch -a > > > 1.0-beta1-release > > > * master > > > remotes/github/master > > > remotes/origin/1.0-beta1-release > > > remotes/origin/GEOMETRY-53 > > > remotes/origin/GEOMETRY-54 > > > remotes/origin/GEOMETRY-56 > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0 > > > > > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4 > > > > > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0 > > > > > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2 > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38 > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39 > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1 > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43 > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0 > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0 > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0 > > > remotes/origin/dependabot/maven/jmh.version-1.27 > > > remotes/origin/dependabot/maven/jmh.version-1.32 > > > > > > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2 > > > > > > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0 > > > > remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0 > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1 > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2 > > > remotes/origin/master > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
