Re: Github action versioning

2020-08-16 Thread Gary Gregory
Hi all,

As Apache Commons is a single Apache Project, we have one dev and one user
ML. I think we should keep it that way, it helps Commons be Commons IMO. We
also have one git commit ML. We could have an additional ML for robots
which would only be used by services like github so any PR and Dependabot
emails would go to the robots ML. The commit ML is a kind of robot so there
some conceptual duplication IMO but we can all deal with it I am sure ;-)

Thoughts?

Gary

On Sun, Aug 16, 2020, 09:48 John Patrick  wrote:

> I wonder if openjdk has considered all the auto generated traffic that
> might be triggered from github. As for JDK 16 they are moving from
> Mercurial to Git, and moving from internal hosting to Github. I guess
> we will know shortly as ramp down for JDK 16 will start something in
> december.
>
> Having seen renovate (similar to dependabot) enabled for cucumber in
> july, and the spike of ~50 pr initially, which each having an email
> about code coverage, then another when approved and merged, then each
> time rebased, another email and another code coverage email, until the
> final merge email. It was a downpour of emails.
>
> I expect commons will see similar spikes after a release of a project,
> as so many projects on the same mailing lists, and when a release
> train starts it cascades automatically, but it's better than someone
> having to manually perform those tasks.
>
> The question I guess is how do those with commit/approve privileges
> want to receive notifications about PR's, comments and merges. With
> dependabot adding automation, is it time to split out those github
> event triggered emails to maybe commons-github or commons-lang-github.
> If the people with the power believe they are being overloads with an
> increase of traffic, it would give them the opportunity to only
> receive notifications for projects they want to maintain. Splitting
> dependabot from user triggered events, if you're wanting to avoid or
> mute dependabot emails, you might as well simply disable dependabot.
>
> Using gmail, it does allow simple filtering and displaying those
> threads, I wouldn't want to receive github event emails using an email
> client that doesn't automatically group email threads.
>
> That reminds me, should I be top commenting or bottom commenting or
> inline commenting for commons emails, as gmail defaults to top.
>
> John
>
> On Sun, 16 Aug 2020 at 14:10, Mark Thomas  wrote:
> >
> > On 16/08/2020 13:58, Gary Gregory wrote:
> > > I would not do that for Maven plugins in a POM, so I would not do that
> > > either for GitHub actions.
> >
> > Fair enough. It looked to me as if these updates were being approved
> > largely automatically hence the suggestion to skip that and just let the
> > upgrades happen. The option is there for components that want to use it.
> >
> > > Mailing list volume is a different topic.
> >
> > Indeed.
> >
> > Mark
> >
> > >
> > > Gary
> > >
> > > On Sun, Aug 16, 2020, 05:55 Mark Thomas  wrote:
> > >
> > >> Hi,
> > >>
> > >> I am seeing an awful lot of list traffic generated for patch updates
> to
> > >> github actions e.g. updating from v1.4.0 to v1.4.1
> > >>
> > >> Having read [1], my understanding is that we can specify v1 and that
> > >> will always point to the latest 1.x.x release.
> > >>
> > >> Would it not be better to specify v1 for these actions as that way:
> > >> - we use the latest version automatically (until 2.x.x is released)
> > >> - we avoid all the noise on the mailing list
> > >>
> > >> Mark
> > >>
> > >>
> > >>
> > >> [1] https://docs.github.com/en/actions/creating-actions/about-actions
> > >>
> > >> -
> > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > >> For additional commands, e-mail: dev-h...@commons.apache.org
> > >>
> > >>
> > >
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: Github action versioning

2020-08-16 Thread John Patrick
I wonder if openjdk has considered all the auto generated traffic that
might be triggered from github. As for JDK 16 they are moving from
Mercurial to Git, and moving from internal hosting to Github. I guess
we will know shortly as ramp down for JDK 16 will start something in
december.

Having seen renovate (similar to dependabot) enabled for cucumber in
july, and the spike of ~50 pr initially, which each having an email
about code coverage, then another when approved and merged, then each
time rebased, another email and another code coverage email, until the
final merge email. It was a downpour of emails.

I expect commons will see similar spikes after a release of a project,
as so many projects on the same mailing lists, and when a release
train starts it cascades automatically, but it's better than someone
having to manually perform those tasks.

The question I guess is how do those with commit/approve privileges
want to receive notifications about PR's, comments and merges. With
dependabot adding automation, is it time to split out those github
event triggered emails to maybe commons-github or commons-lang-github.
If the people with the power believe they are being overloads with an
increase of traffic, it would give them the opportunity to only
receive notifications for projects they want to maintain. Splitting
dependabot from user triggered events, if you're wanting to avoid or
mute dependabot emails, you might as well simply disable dependabot.

Using gmail, it does allow simple filtering and displaying those
threads, I wouldn't want to receive github event emails using an email
client that doesn't automatically group email threads.

That reminds me, should I be top commenting or bottom commenting or
inline commenting for commons emails, as gmail defaults to top.

John

On Sun, 16 Aug 2020 at 14:10, Mark Thomas  wrote:
>
> On 16/08/2020 13:58, Gary Gregory wrote:
> > I would not do that for Maven plugins in a POM, so I would not do that
> > either for GitHub actions.
>
> Fair enough. It looked to me as if these updates were being approved
> largely automatically hence the suggestion to skip that and just let the
> upgrades happen. The option is there for components that want to use it.
>
> > Mailing list volume is a different topic.
>
> Indeed.
>
> Mark
>
> >
> > Gary
> >
> > On Sun, Aug 16, 2020, 05:55 Mark Thomas  wrote:
> >
> >> Hi,
> >>
> >> I am seeing an awful lot of list traffic generated for patch updates to
> >> github actions e.g. updating from v1.4.0 to v1.4.1
> >>
> >> Having read [1], my understanding is that we can specify v1 and that
> >> will always point to the latest 1.x.x release.
> >>
> >> Would it not be better to specify v1 for these actions as that way:
> >> - we use the latest version automatically (until 2.x.x is released)
> >> - we avoid all the noise on the mailing list
> >>
> >> Mark
> >>
> >>
> >>
> >> [1] https://docs.github.com/en/actions/creating-actions/about-actions
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> >> For additional commands, e-mail: dev-h...@commons.apache.org
> >>
> >>
> >
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: Github action versioning

2020-08-16 Thread Mark Thomas
On 16/08/2020 13:58, Gary Gregory wrote:
> I would not do that for Maven plugins in a POM, so I would not do that
> either for GitHub actions.

Fair enough. It looked to me as if these updates were being approved
largely automatically hence the suggestion to skip that and just let the
upgrades happen. The option is there for components that want to use it.

> Mailing list volume is a different topic.

Indeed.

Mark

> 
> Gary
> 
> On Sun, Aug 16, 2020, 05:55 Mark Thomas  wrote:
> 
>> Hi,
>>
>> I am seeing an awful lot of list traffic generated for patch updates to
>> github actions e.g. updating from v1.4.0 to v1.4.1
>>
>> Having read [1], my understanding is that we can specify v1 and that
>> will always point to the latest 1.x.x release.
>>
>> Would it not be better to specify v1 for these actions as that way:
>> - we use the latest version automatically (until 2.x.x is released)
>> - we avoid all the noise on the mailing list
>>
>> Mark
>>
>>
>>
>> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>> For additional commands, e-mail: dev-h...@commons.apache.org
>>
>>
> 


-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: Github action versioning

2020-08-16 Thread Gary Gregory
I would not do that for Maven plugins in a POM, so I would not do that
either for GitHub actions.

Mailing list volume is a different topic.

Gary

On Sun, Aug 16, 2020, 05:55 Mark Thomas  wrote:

> Hi,
>
> I am seeing an awful lot of list traffic generated for patch updates to
> github actions e.g. updating from v1.4.0 to v1.4.1
>
> Having read [1], my understanding is that we can specify v1 and that
> will always point to the latest 1.x.x release.
>
> Would it not be better to specify v1 for these actions as that way:
> - we use the latest version automatically (until 2.x.x is released)
> - we avoid all the noise on the mailing list
>
> Mark
>
>
>
> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: Github action versioning

2020-08-16 Thread Rob Tompkins


> On Aug 16, 2020, at 8:29 AM, Rob Tompkins  wrote:
> 
> 
> Sure. That’s why you’ve pulled me from a “no” to a non-blocking dissenting 
> opinion. I will go with community consensus at this point despite my opinion 
> (-0) (-; 
> 
> -Rob
> 
>>> On Aug 16, 2020, at 8:25 AM, Xeno Amess  wrote:
>>> 
>> 
>> @Rob Tompkins 
>> Hi.
>> Please consider:
>> 1. Most people who subscribe commons-dev have no right to do any operations 
>> to dependabot prs.
>> We can not help merge them, nor decline them & close them. Means reading 
>> such mails are a waste of time.
>> 2. Most people who subscribe commons-dev actually do not really want to read 
>> such e-mails.
>> 3. Dependabot mails usually have low value. Only maintainers should have 
>> some interest in watching them. And usually it will not break 
>> anything.(Just, usually, in most cases).
>> 4. Dependabot mails are flooding. They are too many.
>> 5. Dependabot mails cause argues about them (this happened several times 
>> this two weeks).
>> 
>> Well my idea is we create a new mailing list named "commons-dev-auto" or  
>> "commons-dev-bot", who contains all the auto-email.
>> 
>> > I want the emails as bots should be treated as people in some sense.
>> 
>> But the reality is the bot is not people.

Based on my readings about the theory of consciousness (See Annaka Harris’ book 
“Consciousness”), my feelings on the matter directly oppose yours here (agree 
to disagree). In fact I think that computers may actually have some self 
awareness. This may seem a tad loony and likely quite controversial. This is 
why I’m going to keep myself as non-blocking but dissenting as to keep my 
beliefs to myself and not impose upon the will of the community. :-)

-Rob

>> Besides, if there be such a people who make that much pr, will you promise 
>> review every of those prs, and do not complain about him be flooding?
>> 
>> Rob Tompkins  于2020年8月16日周日 下午8:02写道:
>>> 
>>> 
>>> > On Aug 16, 2020, at 5:59 AM, Xeno Amess  wrote:
>>> > 
>>> > I REALLY suggest we move all dependabot mails to another mailing list.
>>> > please create one.
>>> 
>>> Your point has pulled me from a -1 to a -0, where I want the emails as bots 
>>> should be treated as people in some sense. That said, I’m curious as to 
>>> what others think...
>>> 
>>> Thoughts?
>>> 
>>> -Rob
>>> 
>>> > 
>>> > Mark Thomas  于 2020年8月16日周日 下午5:55写道:
>>> > 
>>> >> Hi,
>>> >> 
>>> >> I am seeing an awful lot of list traffic generated for patch updates to
>>> >> github actions e.g. updating from v1.4.0 to v1.4.1
>>> >> 
>>> >> Having read [1], my understanding is that we can specify v1 and that
>>> >> will always point to the latest 1.x.x release.
>>> >> 
>>> >> Would it not be better to specify v1 for these actions as that way:
>>> >> - we use the latest version automatically (until 2.x.x is released)
>>> >> - we avoid all the noise on the mailing list
>>> >> 
>>> >> Mark
>>> >> 
>>> >> 
>>> >> 
>>> >> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>>> >> 
>>> >> -
>>> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>>> >> For additional commands, e-mail: dev-h...@commons.apache.org
>>> >> 
>>> >> 
>>> 
>>> -
>>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>>> For additional commands, e-mail: dev-h...@commons.apache.org
>>> 


Re: Github action versioning

2020-08-16 Thread Rob Tompkins
Sure. That’s why you’ve pulled me from a “no” to a non-blocking dissenting 
opinion. I will go with community consensus at this point despite my opinion 
(-0) (-; 

-Rob

> On Aug 16, 2020, at 8:25 AM, Xeno Amess  wrote:
> 
> 
> @Rob Tompkins 
> Hi.
> Please consider:
> 1. Most people who subscribe commons-dev have no right to do any operations 
> to dependabot prs.
> We can not help merge them, nor decline them & close them. Means reading such 
> mails are a waste of time.
> 2. Most people who subscribe commons-dev actually do not really want to read 
> such e-mails.
> 3. Dependabot mails usually have low value. Only maintainers should have some 
> interest in watching them. And usually it will not break anything.(Just, 
> usually, in most cases).
> 4. Dependabot mails are flooding. They are too many.
> 5. Dependabot mails cause argues about them (this happened several times this 
> two weeks).
> 
> Well my idea is we create a new mailing list named "commons-dev-auto" or  
> "commons-dev-bot", who contains all the auto-email.
> 
> > I want the emails as bots should be treated as people in some sense.
> 
> But the reality is the bot is not people.
> Besides, if there be such a people who make that much pr, will you promise 
> review every of those prs, and do not complain about him be flooding?
> 
> Rob Tompkins  于2020年8月16日周日 下午8:02写道:
>> 
>> 
>> > On Aug 16, 2020, at 5:59 AM, Xeno Amess  wrote:
>> > 
>> > I REALLY suggest we move all dependabot mails to another mailing list.
>> > please create one.
>> 
>> Your point has pulled me from a -1 to a -0, where I want the emails as bots 
>> should be treated as people in some sense. That said, I’m curious as to what 
>> others think...
>> 
>> Thoughts?
>> 
>> -Rob
>> 
>> > 
>> > Mark Thomas  于 2020年8月16日周日 下午5:55写道:
>> > 
>> >> Hi,
>> >> 
>> >> I am seeing an awful lot of list traffic generated for patch updates to
>> >> github actions e.g. updating from v1.4.0 to v1.4.1
>> >> 
>> >> Having read [1], my understanding is that we can specify v1 and that
>> >> will always point to the latest 1.x.x release.
>> >> 
>> >> Would it not be better to specify v1 for these actions as that way:
>> >> - we use the latest version automatically (until 2.x.x is released)
>> >> - we avoid all the noise on the mailing list
>> >> 
>> >> Mark
>> >> 
>> >> 
>> >> 
>> >> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>> >> 
>> >> -
>> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>> >> For additional commands, e-mail: dev-h...@commons.apache.org
>> >> 
>> >> 
>> 
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>> For additional commands, e-mail: dev-h...@commons.apache.org
>> 


Re: Github action versioning

2020-08-16 Thread Xeno Amess
@Rob Tompkins 
Hi.
Please consider:
1. Most people who subscribe commons-dev have no right to do any operations
to dependabot prs.
We can not help merge them, nor decline them & close them. Means reading
such mails are a waste of time.
2. Most people who subscribe commons-dev actually do not really want to
read such e-mails.
3. Dependabot mails usually have low value. Only maintainers should have
some interest in watching them. And usually it will not break
anything.(Just, usually, in most cases).
4. Dependabot mails are flooding. They are too many.
5. Dependabot mails cause argues about them (this happened several times
this two weeks).

Well my idea is we create a new mailing list named "commons-dev-auto" or
"commons-dev-bot", who contains all the auto-email.

> I want the emails as bots should be treated as people in some sense.

But the reality is the bot is not people.
Besides, if there be such a people who make that much pr, will you promise
review every of those prs, and do not complain about him be flooding?

Rob Tompkins  于2020年8月16日周日 下午8:02写道:

>
>
> > On Aug 16, 2020, at 5:59 AM, Xeno Amess  wrote:
> >
> > I REALLY suggest we move all dependabot mails to another mailing list.
> > please create one.
>
> Your point has pulled me from a -1 to a -0, where I want the emails as
> bots should be treated as people in some sense. That said, I’m curious as
> to what others think...
>
> Thoughts?
>
> -Rob
>
> >
> > Mark Thomas  于 2020年8月16日周日 下午5:55写道:
> >
> >> Hi,
> >>
> >> I am seeing an awful lot of list traffic generated for patch updates to
> >> github actions e.g. updating from v1.4.0 to v1.4.1
> >>
> >> Having read [1], my understanding is that we can specify v1 and that
> >> will always point to the latest 1.x.x release.
> >>
> >> Would it not be better to specify v1 for these actions as that way:
> >> - we use the latest version automatically (until 2.x.x is released)
> >> - we avoid all the noise on the mailing list
> >>
> >> Mark
> >>
> >>
> >>
> >> [1] https://docs.github.com/en/actions/creating-actions/about-actions
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> >> For additional commands, e-mail: dev-h...@commons.apache.org
> >>
> >>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: Github action versioning

2020-08-16 Thread Rob Tompkins



> On Aug 16, 2020, at 5:59 AM, Xeno Amess  wrote:
> 
> I REALLY suggest we move all dependabot mails to another mailing list.
> please create one.

Your point has pulled me from a -1 to a -0, where I want the emails as bots 
should be treated as people in some sense. That said, I’m curious as to what 
others think...

Thoughts?

-Rob

> 
> Mark Thomas  于 2020年8月16日周日 下午5:55写道:
> 
>> Hi,
>> 
>> I am seeing an awful lot of list traffic generated for patch updates to
>> github actions e.g. updating from v1.4.0 to v1.4.1
>> 
>> Having read [1], my understanding is that we can specify v1 and that
>> will always point to the latest 1.x.x release.
>> 
>> Would it not be better to specify v1 for these actions as that way:
>> - we use the latest version automatically (until 2.x.x is released)
>> - we avoid all the noise on the mailing list
>> 
>> Mark
>> 
>> 
>> 
>> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>> 
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
>> For additional commands, e-mail: dev-h...@commons.apache.org
>> 
>> 

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: Github action versioning

2020-08-16 Thread Xeno Amess
I REALLY suggest we move all dependabot mails to another mailing list.
please create one.

Mark Thomas  于 2020年8月16日周日 下午5:55写道:

> Hi,
>
> I am seeing an awful lot of list traffic generated for patch updates to
> github actions e.g. updating from v1.4.0 to v1.4.1
>
> Having read [1], my understanding is that we can specify v1 and that
> will always point to the latest 1.x.x release.
>
> Would it not be better to specify v1 for these actions as that way:
> - we use the latest version automatically (until 2.x.x is released)
> - we avoid all the noise on the mailing list
>
> Mark
>
>
>
> [1] https://docs.github.com/en/actions/creating-actions/about-actions
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Github action versioning

2020-08-16 Thread Mark Thomas
Hi,

I am seeing an awful lot of list traffic generated for patch updates to
github actions e.g. updating from v1.4.0 to v1.4.1

Having read [1], my understanding is that we can specify v1 and that
will always point to the latest 1.x.x release.

Would it not be better to specify v1 for these actions as that way:
- we use the latest version automatically (until 2.x.x is released)
- we avoid all the noise on the mailing list

Mark



[1] https://docs.github.com/en/actions/creating-actions/about-actions

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org