With Go the dependabot experience indeed isn't that great yet, since vendoring and automatically running go mod clean after every update are not supported yet. [email protected] schrieb am Montag, 8. Juni 2020 um 15:08:50 UTC+2:
> It is as long as you don’t vendor deps. > > > On 8 Jun 2020, at 14:10, Simon Pasquier <[email protected]> wrote: > > > > +1 for the React codebase. > > FWIW last time I looked at it, dependabot wasn't really ready for > > managing Go dependencies. > > > >> On Mon, Jun 8, 2020 at 7:11 AM Julien Pivotto > >> <[email protected]> wrote: > >> > >> I +1 this > >> > >>> Le lun. 8 juin 2020 à 07:09, Ben Kochie <[email protected]> a écrit : > >>> > >>> I'd like to enable Dependabot on prometheus/prometheus, specifically > to automatically handle the React UI version bumps. This will deal with the > small version bumps for all the random security vulnerabilities that pop up. > >>> > >>> The bot will create PRs like this one: > >>> > >>> https://github.com/prometheus-community/monaco-promql/pull/12 > >>> > >>> -- > >>> You received this message because you are subscribed to the Google > Groups "Prometheus Developers" group. > >>> To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > >>> To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-developers/CABbyFmrdAwW8Qp0%2BemgwQQKWNpPVUA1RrRVuOXAndbM3VpPHLQ%40mail.gmail.com > . > >> > >> -- > >> You received this message because you are subscribed to the Google > Groups "Prometheus Developers" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > >> To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-developers/CAFJ6V0rngch9PCYup_svH4nYSNyZ2VeMUnFbym%3DS4qOSsyvPVw%40mail.gmail.com > . > > > > -- > > You received this message because you are subscribed to the Google > Groups "Prometheus Developers" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-developers/CAM6RFu4zFvwzS1DB9O8eUEoHikukX5fape9p9s6%2BFi66ycSxkw%40mail.gmail.com > . > -- You received this message because you are subscribed to the Google Groups "Prometheus Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-developers/970f1847-05cc-4eb6-b541-e9c27ab67c03n%40googlegroups.com.
