The previous one (not this one) was me, I merged the branch locally and 
then pushed it.

So there's still a manual step but somehow the history doesn't show this.

Tilman



--- Original-Nachricht ---
Von: Tim Allison
Betreff: Automatic updates?
Datum: 18. Mai 2022, 14:25
An: <dev@tika.apache.org>




@font-face { font-family: telegrotesk-medium_normal; src: 
url("file:///android_asset/fonts/telegrotesk_normal.ttf");}html,body { 
font-family: "telegrotesk-medium_normal"; font-size: medium; color: 
#4b4b4b; width: 100%;}

All,
It feels like something changed in the last week with our dependabot
integration. We used to get PRs. Now we're getting PRs that are
automatically merged.
I don't think this is a great idea. What do you think?

Best,

Tim

On Wed, May 18, 2022 at 1:55 AM GitBox <g...@apache.org> wrote:

>
> dependabot[bot] opened a new pull request, #562:
> URL: https://github.com/apache/tika/pull/562
>
> Bumps [zstd-jni](https://github.com/luben/zstd-jni) from 1.5.2-2 to
> 1.5.2-3.
> <details>
> <summary>Commits</summary>
> <ul>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/c983ae3e086b63a40e1bb430cb2ebf95ecc52c71";><code>c983ae3</code></a>;
> Adjust signature comments after
> e5c6a3290b8335db7c70877fda22ca26a96c72e4.</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/510bbd6be80592227c6e5cf8cd8d71cb76c0c279";><code>510bbd6</code></a>;
> Add methods for streaming (de)compression of direct ByteBuffers.</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/62b9dad49fc00f253cb35c1942c3ca6af4ee2b47";><code>62b9dad</code></a>;
> Fix lgtm C++.</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/73ae46e1af16619143b7c87e35ad9c05363e2c97";><code>73ae46e</code></a>;
> v1.5.2-3</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/e5c6a3290b8335db7c70877fda22ca26a96c72e4";><code>e5c6a32</code></a>;
> Fix overflows</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/54d3d50c16d96bd8a30e2d4c0a9648001a52d6f9";><code>54d3d50</code></a>;
> Fix some error return codes.</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/b788a2ed7a5e36e5252b1696e6cc8bae48a7afbc";><code>b788a2e</code></a>;
> Upgrade scala.</li>
> <li><a href="
> 
https://github.com/luben/zstd-jni/commit/31060934c26e080031465702ec369591e12874f8";><code>3106093</code></a>;
> Add NoFinalizer variants for the direct buffer streams.</li>
> <li>See full diff in <a href="
> https://github.com/luben/zstd-jni/compare/v1.5.2-2...v1.5.2-3";>compare
> view</a></li>
> </ul>
> </details>
> <br />
>
>
> [![Dependabot compatibility score](
> 
https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.2-2&new-version=1.5.2-3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores
> )
>
> Dependabot will resolve any conflicts with this PR as long as you don't
> alter it yourself. You can also trigger a rebase manually by commenting
> `@dependabot rebase`.
>
> [//]: # (dependabot-automerge-start)
> [//]: # (dependabot-automerge-end)
>
> ---
>
> <details>
> <summary>Dependabot commands and options</summary>
> <br />
>
> You can trigger Dependabot actions by commenting on this PR:
> - `@dependabot rebase` will rebase this PR
> - `@dependabot recreate` will recreate this PR, overwriting any edits
> that have been made to it
> - `@dependabot merge` will merge this PR after your CI passes on it
> - `@dependabot squash and merge` will squash and merge this PR after
> your CI passes on it
> - `@dependabot cancel merge` will cancel a previously requested merge
> and block automerging
> - `@dependabot reopen` will reopen this PR if it is closed
> - `@dependabot close` will close this PR and stop Dependabot recreating
> it. You can achieve the same result by closing it manually
> - `@dependabot ignore this major version` will close this PR and stop
> Dependabot creating any more for this major version (unless you reopen 
the
> PR or upgrade to it yourself)
> - `@dependabot ignore this minor version` will close this PR and stop
> Dependabot creating any more for this minor version (unless you reopen 
the
> PR or upgrade to it yourself)
> - `@dependabot ignore this dependency` will close this PR and stop
> Dependabot creating any more for this dependency (unless you reopen the 
PR
> or upgrade to it yourself)
>
>
> </details>
>
>
> --
> This is an automated message from the Apache Git Service.
> To respond to the message, please log on to GitHub and use the
> URL above to go to the specific comment.
>
> To unsubscribe, e-mail: dev-unsubscr...@tika.apache.org
>
> For queries about this service, please contact Infrastructure at:
> us...@infra.apache.org
>
>

Reply via email to