Re: [Numpy-discussion] Allowing Dependabot access to the numpy repo

2019-09-01 Thread Matti Picus
Discussion has died down, I think the consensus is to use Dependabot. I will proceed with allowing it access. Thanks, Matti On 29/8/19 12:07 pm, Nathaniel Smith wrote: AFAICT all these services work by creating branches inside your repo and then making a PR from that – they don't make their

Re: [Numpy-discussion] Allowing Dependabot access to the numpy repo

2019-08-29 Thread Nathaniel Smith
AFAICT all these services work by creating branches inside your repo and then making a PR from that – they don't make their own forks. (Which makes some sense when you consider they would need tens of thousands of forked epos for all the projects they work with.) I don't think there's any need to

Re: [Numpy-discussion] Allowing Dependabot access to the numpy repo

2019-08-29 Thread Ryan May
Hi, The answer to why Dependabot needs write permission seems to be to be able to work with private repos: https://github.com/dependabot/feedback/issues/22 There doesn't seem to be any way around it... :( Ryan On Thu, Aug 29, 2019 at 12:04 AM Matti Picus wrote: > In PR 14378