I propose we try dependabot first for the new main - benefit is we don't need 
to host it ourselves.
If version catalogs are not backported to 9x, perhaps we can re-purpose SolrBot 
to file PRs for branch_9_N?

Jan

> 14. nov. 2024 kl. 05:47 skrev Christos Malliaridis <malliari...@apache.org>:
> 
> The current bot would require some configuration changes to get it running 
> again, as renovate relies on palantirs plugin for updating lock files, and I 
> believe it uses "gradlew --write-locks" to update the file. This would not 
> work anymore.
> 
> The bot already runs a custom task for including "gradlew updateLicenses", so 
> it should be possible to also include "gradlew writeLocks". I tried to run it 
> with updated configs on a project clone, but failed to get it up and running 
> (it fails to fork the project).
> 
> I reviewed debendabot as well and it seems quite easy to get it up and 
> running. We will only have to add add a basic config file and a workflow for 
> running the two tasks "gradlew writeLocks" and "gradlew updateLicenses", as 
> these cannot be configured in dependabot from what I know.
> 
> I think dependabot comes with better GitHub integration and it would be worth 
> considering a switch, as Jan proposed.
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org
> For additional commands, e-mail: dev-h...@solr.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org
For additional commands, e-mail: dev-h...@solr.apache.org

Reply via email to