Pil0tXia commented on PR #4827:
URL: https://github.com/apache/eventmesh/pull/4827#issuecomment-2075019533

   I've made some progress in `dependency-submission` and 
`dependency-review-action`. The `gradle-build-action@v2` has been upgraded to 
`gradle/actions/setup-gradle@v3` and 
`gradle/actions/dependency-submission@v3.3.0`. And `dependency-review-action` 
is now able to detect Gradle dependency changes in [GH 
Actions](https://github.com/Pil0tXia/eventmesh/actions/runs/8812790285/job/24189164658),
 however it takes 30min~60min to detect dependency graph's change and it is 
considered as a bug to be fixed in a future release. So I think this PR does 
not have technical difficulties for now and can be updated in the next PR when 
upstream actions' bugs are fixed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@eventmesh.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@eventmesh.apache.org
For additional commands, e-mail: issues-h...@eventmesh.apache.org

Reply via email to