Re: Automating Syncope's dependency updates

2019-12-17 Thread Francesco Chicchiriccò
Monday, December 16, 2019 12:22:45 PM >> Subject: Re: Automating Syncope's dependency updates >> Hi Misagh, >> it seems we have some consensus here, please go ahead and open an issue on >> >> https://issues.apache.org/jira/browse/INFRA >> >> about thi

Re: Automating Syncope's dependency updates

2019-12-16 Thread Misagh Moayyed
Sure, will do. Thanks everyone. --Misagh - Original Message - > From: "Francesco Chicchiriccò" > To: "dev" > Sent: Monday, December 16, 2019 12:22:45 PM > Subject: Re: Automating Syncope's dependency updates > Hi Misagh, > it seems we ha

Re: Automating Syncope's dependency updates

2019-12-16 Thread Francesco Chicchiriccò
Hi Misagh, it seems we have some consensus here, please go ahead and open an issue on https://issues.apache.org/jira/browse/INFRA about this topic, thanks. Regards. On 11/12/19 15:13, Francesco Chicchiriccò wrote: > Hi Misagh, > renovatebot looks interesting and worth at least to explore the po

Re: Automating Syncope's dependency updates

2019-12-11 Thread Matteo Alessandroni
Hi Misagh, I find your proposal very interesting, so for me +1. Just want to underline that /Renovate/ has recently joined /WhiteSource/ and this is a plus IMHO because /WhiteSource/ is known to deal with the open source security world and the takeover let them provide their offerings for fre

Re: Automating Syncope's dependency updates

2019-12-11 Thread Fabio Martelli
Il 11/12/19 15:00, Misagh Moayyed ha scritto: Hey Team, I suspect most know about this sort of thing, but I thought to share this with you: https://github.com/renovatebot/renovate Wow, it is really widely used. Sounds really interesting to have it on Syncope. +1 for me I think this is a

Re: Automating Syncope's dependency updates

2019-12-11 Thread Andrea Patricelli
Hi Misagh, very interesting tool, +1 for me about setting it up on Syncope. The only thing that comes to my mind is that that we should setup, first, a set of "critical" dependencies to exclude (due to breaking changes or integration issues with other dependencies), I'm thinking about Spring

Re: Automating Syncope's dependency updates

2019-12-11 Thread Francesco Chicchiriccò
Hi Misagh, renovatebot looks interesting and worth at least to explore the possibility to add it at project's (rather than committer's level). +1 to go ahead and ask Infra team about it. Regards. On 11/12/19 15:00, Misagh Moayyed wrote: > Hey Team, > > I suspect most know about this sort of thin