I mentioned it earlier in the thread, but Casey is right about dependabot
per https://issues.apache.org/jira/browse/LEGAL-491.
On Wed, Jan 15, 2020 at 8:13 PM Casey Stella wrote:
> I'd recommend pulling this into a separate thread and tagging the question
> with [MENTORS]. FWIW, I'm of the
I'd recommend pulling this into a separate thread and tagging the question
with [MENTORS]. FWIW, I'm of the opinion that you should just denote in
the commit that it was a dependabot contribution, squash like we normally
do and not rewrite the user for attribution. dependabot does not appear to
Ok, I've tested and +1'ed https://github.com/apache/metron/pull/1552.
Anyone have any idea how to properly merge and attribute a PR like this?
Did a quick search on "apache attribution dependabot" and nothing useful
showed up on that pass.
M
On Tue, Jan 14, 2020 at 11:36 AM Otto Fowler
wrote:
