[ 
https://issues.apache.org/jira/browse/FINERACT-962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17127588#comment-17127588
 ] 

Michael Vorburger edited comment on FINERACT-962 at 6/7/20, 11:00 AM:
----------------------------------------------------------------------

[https://github.com/apache/fineract/pulls?q=label%3Arenovate+] has suggested 
upgrades, but only 4, so far.. I expected that there would be many more 
proposed, especially given everything Dependabot found during my evaluation on 
[https://github.com/vorburger/fineract/pulls.] (At least some of which we've 
meanwhile already done, before Renovate; I'll try to somehow get Dependabot to 
do a new round and close what it can but am facing 
https://github.com/dependabot/feedback/issues/955; but I bet there will still 
be some left even after that's solved...)

FINERACT-1002 may actually help for Renovate to identify more? I've just merged 
that - let's see if Renovate will propose any more upgrades now. I expect 
Renovate should soon propose to upgrade activemq-broker to 5.15.13 instead of 
5.15.12 (see comment on [https://github.com/apache/fineract/pull/977]), if it 
works with the BOM stuff... ?

[https://app.renovatebot.com/dashboard#github/apache/fineract] seem to try 
other upgrades as well? For example, if I interpret that log correctly, 
apparently it attempts to upgrade our Gradle version (which would be great!), 
but then doesn't send a PR for it... [~rarkins] you would probably know why?


was (Author: vorburger):
[https://github.com/apache/fineract/pulls?q=label%3Arenovate+] has suggested 
upgrades, but only 4, so far.. I expected that there would be many more 
proposed, especially given everything Dependabot found during my evaluation on 
[https://github.com/vorburger/fineract/pulls.] (At least some of which we've 
meanwhile already done, before Renovate; I'll try to somehow get Dependabot to 
do a new round and close what it can; but I bet there will still be some 
left...)

FINERACT-1002 may actually help for Renovate to identify more? I've just merged 
that - let's see if Renovate will propose any more upgrades now. I expect 
Renovate should soon propose to upgrade activemq-broker to 5.15.13 instead of 
5.15.12 (see comment on https://github.com/apache/fineract/pull/977), if it 
works with the BOM stuff... ?

[https://app.renovatebot.com/dashboard#github/apache/fineract] seem to try 
other upgrades as well? For example, if I interpret that log correctly, 
apparently it attempts to upgrade our Gradle version (which would be great!), 
but then doesn't send a PR for it... [~rarkins] you would probably know why?

> Use  Renovate for Fineract
> --------------------------
>
>                 Key: FINERACT-962
>                 URL: https://issues.apache.org/jira/browse/FINERACT-962
>             Project: Apache Fineract
>          Issue Type: Sub-task
>          Components: Build
>            Reporter: Michael Vorburger
>            Assignee: Michael Vorburger
>            Priority: Major
>              Labels: dependencies, tech-debt, technical
>             Fix For: 1.4.0
>
>
> https://renovate.whitesourcesoftware.com
> Based solely on comparing the initial list on 
> https://github.com/vorburger/fineract/pull/2 VS 
> https://github.com/vorburger/fineract/pulls?q=is%3Apr+author%3Aapp%2Fdependabot-preview+,
>  Renovate and Dependabot seem to find similar results. It could still be fun 
> to run them both?
> INFRA-19586 explains that ASF can't accept the Renovate GitHub App.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to