Re: [PR] chore: Included githubactions in the dependabot config

2022-05-24 Thread Илья Шипицин
in theory, this flow might be evolved

1) currently there's automation which closes every PR. automation is hidden
somewhere and only few people can modify it

2) the same automation might be implemented using Github Actions (closing
PR, sending email to list, etc), and there's a space for customization,
certain PRs (from dependabot) might be handled in different way

I think, dependabot adds small improvement, it is automated monitoring.
but I agree that will be noisy and not very useful.

вт, 24 мая 2022 г. в 12:27, Tim Düsterhus :

> Hi
>
> On 5/24/22 03:23, PR Bot wrote:
> > Dear list!
> >
> > Author: naveen <172697+naveensriniva...@users.noreply.github.com>
> > Number of patches: 1
> >
> > This is an automated relay of the Github pull request:
> > chore: Included githubactions in the dependabot config
> >
> > Patch title(s):
> > chore: Included githubactions in the dependabot config
> >
>
> I disagree with this patch. This does not bring a real benefit for us
> and only increases the noise by more (automated) pull requests.
>
> What the PR does is basically setting up automated pull requests for
> patches like these:
>
>
> https://github.com/haproxy/haproxy/commit/5f4ddb54b05ae0355b1f64c22263a6bc381410df
>
> I keep track of that and send patches as appropriate.
>
> Best regards
> Tim Düsterhus
>
>


Re: [PR] chore: Included githubactions in the dependabot config

2022-05-24 Thread Tim Düsterhus

Hi

On 5/24/22 03:23, PR Bot wrote:

Dear list!

Author: naveen <172697+naveensriniva...@users.noreply.github.com>
Number of patches: 1

This is an automated relay of the Github pull request:
chore: Included githubactions in the dependabot config

Patch title(s):
chore: Included githubactions in the dependabot config



I disagree with this patch. This does not bring a real benefit for us 
and only increases the noise by more (automated) pull requests.


What the PR does is basically setting up automated pull requests for 
patches like these:


https://github.com/haproxy/haproxy/commit/5f4ddb54b05ae0355b1f64c22263a6bc381410df

I keep track of that and send patches as appropriate.

Best regards
Tim Düsterhus



[PR] chore: Included githubactions in the dependabot config

2022-05-23 Thread PR Bot
Dear list!

Author: naveen <172697+naveensriniva...@users.noreply.github.com>
Number of patches: 1

This is an automated relay of the Github pull request:
   chore: Included githubactions in the dependabot config

Patch title(s): 
   chore: Included githubactions in the dependabot config

Link:
   https://github.com/haproxy/haproxy/pull/1713

Edit locally:
   wget https://github.com/haproxy/haproxy/pull/1713.patch && vi 1713.patch

Apply locally:
   curl https://github.com/haproxy/haproxy/pull/1713.patch | git am -

Description:
   This should help with keeping the GitHub actions updated on new
   releases. This will also help with keeping it secure.
   Dependabot helps in keeping the supply chain secure
   https://docs.github.com/en/code-security/dependabot
   
   GitHub
   actions up to date https://docs.github.com/en/code-
   security/dependabot/working-with-dependabot/keeping-your-actions-up-
   to-date-with-dependabot
   https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-
   update-tool
   Signed-off-by: naveen
   <172697+naveensriniva...@users.noreply.github.com>

Instructions:
   This github pull request will be closed automatically; patch should be
   reviewed on the haproxy mailing list (haproxy@formilux.org). Everyone is
   invited to comment, even the patch's author. Please keep the author and
   list CCed in replies. Please note that in absence of any response this
   pull request will be lost.