sconvent opened a new pull request, #11328: URL: https://github.com/apache/dubbo/pull/11328
## What is the purpose of the change As discussed in #11308, a Dependabot config is helpful for maintaining the project. For now, the config is set up to only suggest minor or patch version updates as its main intention is to keep up with bug and vulnerability fixes. Major version updates rarely can be automated as they usually break the build. ## Brief changelog This will add a Dependabot config with the following properties: - Runs every Monday at 3am eastern time - Will ignore major version updates - Never has more than 20 open PRs at any given time ## Additional points - The above properties are a suggestion and I'm happy to discuss any changes. - I performed a dry-run and Dependabot will initially create a bunch of PRs (roughly 20). That will be a bit of work to go through them. - Unfortunately it is not possible to exclude subfolders from the scan. So it would also suggest to upgrade the Spring version in `dubbo-test/dubbo-test-spring3.2/pom.xml` for example although the version there is intentional. These kind of PRs would have to be fixed manually. ## Verifying this change <!-- Follow this checklist to help us incorporate your contribution quickly and easily: --> ## Checklist - [x] Make sure there is a [GitHub_issue](https://github.com/apache/dubbo/issues) field for the change (usually before you start working on it). Trivial changes like typos do not require a GitHub issue. Your pull request should address just this issue, without pulling in other changes - one PR resolves one issue. - [x] Each commit in the pull request should have a meaningful subject line and body. - [x] Write a pull request description that is detailed enough to understand what the pull request does, how, and why. - [x] Check if is necessary to patch to Dubbo 3 if you are work on Dubbo 2.7 - [x] Write necessary unit-test to verify your logic correction, more mock a little better when cross module dependency exist. If the new feature or significant change is committed, please remember to add sample in [dubbo samples](https://github.com/apache/dubbo-samples) project. - [x] Add some description to [dubbo-website](https://github.com/apache/dubbo-website) project if you are requesting to add a feature. - [x] GitHub Actions works fine on your own branch. - [x] If this contribution is large, please follow the [Software Donation Guide](https://github.com/apache/dubbo/wiki/Software-donation-guide). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
