I propose we try dependabot first for the new main - benefit is we don't need to host it ourselves. If version catalogs are not backported to 9x, perhaps we can re-purpose SolrBot to file PRs for branch_9_N?
Jan > 14. nov. 2024 kl. 05:47 skrev Christos Malliaridis <malliari...@apache.org>: > > The current bot would require some configuration changes to get it running > again, as renovate relies on palantirs plugin for updating lock files, and I > believe it uses "gradlew --write-locks" to update the file. This would not > work anymore. > > The bot already runs a custom task for including "gradlew updateLicenses", so > it should be possible to also include "gradlew writeLocks". I tried to run it > with updated configs on a project clone, but failed to get it up and running > (it fails to fork the project). > > I reviewed debendabot as well and it seems quite easy to get it up and > running. We will only have to add add a basic config file and a workflow for > running the two tasks "gradlew writeLocks" and "gradlew updateLicenses", as > these cannot be configured in dependabot from what I know. > > I think dependabot comes with better GitHub integration and it would be worth > considering a switch, as Jan proposed. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org > For additional commands, e-mail: dev-h...@solr.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org For additional commands, e-mail: dev-h...@solr.apache.org