[ 
https://issues.apache.org/jira/browse/HDDS-10196?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Attila Doroszlai updated HDDS-10196:
------------------------------------
    Resolution: Implemented
        Status: Resolved  (was: Patch Available)

> Group dependabot PRs for frontend dependencies
> ----------------------------------------------
>
>                 Key: HDDS-10196
>                 URL: https://issues.apache.org/jira/browse/HDDS-10196
>             Project: Apache Ozone
>          Issue Type: Sub-task
>          Components: CI
>            Reporter: Attila Doroszlai
>            Assignee: Attila Doroszlai
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.5.0
>
>
> I think only a single Recon dependency PR should be open at the same time. If 
> it is still open when dependabot notices another potential version bump, it 
> should be updated, instead of creating a new PR.
> With the existing approach the same PNPM dependencies may be upgraded in 
> multiple PRs.  In each PR, the first commit (the one from dependabot) is 
> focused on the specific dependency; the second commit (generated by the 
> automation added for HDDS-9171) updates everything it can (any dependences 
> with only lower bound).  E.g. compare [PR 
> 6004|https://github.com/apache/ozone/pull/6004/files] and [PR 
> 6005|https://github.com/apache/ozone/pull/6005/files].  So the PR/commit 
> title does not reflect the actual change.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to