We intend to use Scala Steward. There doesn't appear to anything that matches Scala Steward's feature set for Scala based projects.
The simplest approach is to add entries to this page and there is an automated job that will raise PRs: https://github.com/VirtusLab/scala-steward-repos/blob/main/repos-github.md Matthew de Detrich has expressed a preference for us to run our own Scala Steward job. With dependencies between Pekko modules, we intend to follow: https://pekko.apache.org/docs/pekko/current/project/downstream-upgrade-strategy.html With 3rd party dependencies, we will be conservative. If there are security issues, we will almost certainly upgrade to a secure version. Enabling Scala Steward will raise awareness of 3rd party jar releases but merging the PRs will not be automatic. They will need careful review. On 2023/08/14 10:06:57 Samuele Resca wrote: > Hi, > > I'm opening a discussion regarding dependencies updates in Apache Pekko > Core + modules. I saw that most of the Apache Pekko codebases already have > the .scala-steward.conf file for automatically updating dependencies. > Few questions that I have on top of my head: > - Do we want to automate the stay current process in Apache Pekko (core + > modules)? > - Do we want scala-steward running on Apache Pekko Core + modules? Is > there any other alternative system used by ASF projects? > - Which subset of dependency do we want to update? (i.e: excluding > intra-dependencies between Pekko modules) > - Do we have a preference for the schedule (see: pullRequests.frequency)? > > Thanks in advance. > Samuele > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org For additional commands, e-mail: dev-h...@pekko.apache.org
