[
https://issues.apache.org/jira/browse/TINKERPOP-2576?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17357248#comment-17357248
]
ASF GitHub Bot commented on TINKERPOP-2576:
-------------------------------------------
FlorianHockmann commented on a change in pull request #1427:
URL: https://github.com/apache/tinkerpop/pull/1427#discussion_r645473059
##########
File path: .github/dependabot.yml
##########
@@ -0,0 +1,10 @@
+version: 2
+updates:
+ - package-ecosystem: "nuget"
+ directory: "/gremlin-dotnet"
+ schedule:
+ interval: "daily"
+ target-branch: "3.5-dev"
Review comment:
I use `3.5-dev` here as the target branch instead of `3.4-dev` as
`3.4-dev` still contains the source generation from templates for the GLVs
which won't work with Dependabot. But I also think that it's OK to skip updates
for `3.4-dev`, given that most users only use the newest version of Gremlin.NET
anyway (per nuget.org download statistics), and because we haven't done much
updates until now so it's not like this would make anything worse.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Setup automatic updates via Dependabot for Gremlin.NET
> ------------------------------------------------------
>
> Key: TINKERPOP-2576
> URL: https://issues.apache.org/jira/browse/TINKERPOP-2576
> Project: TinkerPop
> Issue Type: Improvement
> Components: build-release, dotnet
> Affects Versions: 3.5.0
> Reporter: Florian Hockmann
> Priority: Major
>
> We had [some discussions in the
> past|https://lists.apache.org/thread.html/1cc0a5d79c3c66b6294c5f27c40c440df761e64e723732d058f114b6%40%3Cdev.tinkerpop.apache.org%3E]
> already about Dependabot. One of the problems that we had with it was that
> we mainly wanted to enable it for the GLVs like Gremlin.NET but we used to
> generate the {{.csproj}} file for that from a template so Dependabot couldn't
> create meaningful PRs as it would not update the template.
> Since we have already removed this generation on {{3.5-dev}} and {{master}},
> we can now set up Dependabot for these two branches.
> I want to start using Dependabot for Gremlin.NET but we can of course later
> on also use it for other parts if we want to.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
