adoroszlai opened a new pull request, #11734: URL: https://github.com/apache/ozone/pull/11734
## What changes were proposed in this pull request? The current approach of keeping dependencies up-to-date has several problems. I plan to start a discussion on `dev@` about it. This change disables dependabot for non-security upgrades of Maven dependencies until then. Keep dependabot updates only in GitHub Actions ecosystem (mandatory per ASF Infra policy). Increase frequency to daily: most actions are defined by major version, seldom updated. Only zizmor is pinned to SHA, and upgrading it is cheap (regular CI is skipped, only asf-allowlist-check and zizmor workflows triggered). https://issues.apache.org/jira/browse/HDDS-17424 ## How was this patch tested? N/A -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
