Re: [PR] chore: Included githubactions in the dependabot config
in theory, this flow might be evolved 1) currently there's automation which closes every PR. automation is hidden somewhere and only few people can modify it 2) the same automation might be implemented using Github Actions (closing PR, sending email to list, etc), and there's a space for customization, certain PRs (from dependabot) might be handled in different way I think, dependabot adds small improvement, it is automated monitoring. but I agree that will be noisy and not very useful. вт, 24 мая 2022 г. в 12:27, Tim Düsterhus : > Hi > > On 5/24/22 03:23, PR Bot wrote: > > Dear list! > > > > Author: naveen <172697+naveensriniva...@users.noreply.github.com> > > Number of patches: 1 > > > > This is an automated relay of the Github pull request: > > chore: Included githubactions in the dependabot config > > > > Patch title(s): > > chore: Included githubactions in the dependabot config > > > > I disagree with this patch. This does not bring a real benefit for us > and only increases the noise by more (automated) pull requests. > > What the PR does is basically setting up automated pull requests for > patches like these: > > > https://github.com/haproxy/haproxy/commit/5f4ddb54b05ae0355b1f64c22263a6bc381410df > > I keep track of that and send patches as appropriate. > > Best regards > Tim Düsterhus > >
Re: [PR] chore: Included githubactions in the dependabot config
Hi On 5/24/22 03:23, PR Bot wrote: Dear list! Author: naveen <172697+naveensriniva...@users.noreply.github.com> Number of patches: 1 This is an automated relay of the Github pull request: chore: Included githubactions in the dependabot config Patch title(s): chore: Included githubactions in the dependabot config I disagree with this patch. This does not bring a real benefit for us and only increases the noise by more (automated) pull requests. What the PR does is basically setting up automated pull requests for patches like these: https://github.com/haproxy/haproxy/commit/5f4ddb54b05ae0355b1f64c22263a6bc381410df I keep track of that and send patches as appropriate. Best regards Tim Düsterhus
[PR] chore: Included githubactions in the dependabot config
Dear list! Author: naveen <172697+naveensriniva...@users.noreply.github.com> Number of patches: 1 This is an automated relay of the Github pull request: chore: Included githubactions in the dependabot config Patch title(s): chore: Included githubactions in the dependabot config Link: https://github.com/haproxy/haproxy/pull/1713 Edit locally: wget https://github.com/haproxy/haproxy/pull/1713.patch && vi 1713.patch Apply locally: curl https://github.com/haproxy/haproxy/pull/1713.patch | git am - Description: This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code- security/dependabot/working-with-dependabot/keeping-your-actions-up- to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency- update-tool Signed-off-by: naveen <172697+naveensriniva...@users.noreply.github.com> Instructions: This github pull request will be closed automatically; patch should be reviewed on the haproxy mailing list (haproxy@formilux.org). Everyone is invited to comment, even the patch's author. Please keep the author and list CCed in replies. Please note that in absence of any response this pull request will be lost.