brucearctor commented on PR #12: URL: https://github.com/apache/beam-starter-python/pull/12#issuecomment-1302437824
Agreed [ since not likely to change much, and this is also not as critical of a path -- if dependabot breaks, we *should* notice and eventually fix ]. I had imagined as part of CI. Detecting before merge is the important part, local is nice but in GH is also OK. I don't have the time to dig into this right now https://github.com/marocchino/validate-dependabot ... but the 30 seconds I spent searching and reading the README sounds like it could protect and ensure remains valid. Also hasn't been touched for a year, so might not still be good [ and also could not be well supported, leaving us in a pickle if we add to this repo's dependencies and then start using new depandabot features that aren't supported in the validator ]. So, lots of text in this paragraph that you don't need to do anything with :-) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
