martin-g commented on issue #4: URL: https://github.com/apache/avro-rs/issues/4#issuecomment-2368282421
> This increases our maintenance burden As the single maintainer of the Rust SDK for the last 3 years I cannot say that the automated PRs increase the burden at all ! > * Commit `Cargo.lock` (and bump it instead) to make sure our CI happy. It has been there since a long time: https://github.com/apache/avro-rs/commits/main/Cargo.lock > * Reduce dependabot check interval to weekly or monthly. I prefer to keep the update interval shorter. This way if a dependency breaks the build I can report it upstream sooner and it will be easier to bisect the reason. Waiting longer time will increase the burden ! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
