+1 for the React codebase. FWIW last time I looked at it, dependabot wasn't really ready for managing Go dependencies.
On Mon, Jun 8, 2020 at 7:11 AM Julien Pivotto <[email protected]> wrote: > > I +1 this > > Le lun. 8 juin 2020 à 07:09, Ben Kochie <[email protected]> a écrit : >> >> I'd like to enable Dependabot on prometheus/prometheus, specifically to >> automatically handle the React UI version bumps. This will deal with the >> small version bumps for all the random security vulnerabilities that pop up. >> >> The bot will create PRs like this one: >> >> https://github.com/prometheus-community/monaco-promql/pull/12 >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Prometheus Developers" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com. > > -- > You received this message because you are subscribed to the Google Groups > "Prometheus Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com. -- You received this message because you are subscribed to the Google Groups "Prometheus Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-developers/CAM6RFu4zFvwzS1DB9O8eUEoHikukX5fape9p9s6%2BFi66ycSxkw%40mail.gmail.com.

