You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@orc.apache.org by GitBox <gi...@apache.org> on 2021/07/24 14:50:18 UTC
[GitHub] [orc] dongjoon-hyun opened a new pull request #762: ORC-860: Add dependabot
dongjoon-hyun opened a new pull request #762:
URL: https://github.com/apache/orc/pull/762
### What changes were proposed in this pull request?
This PR aims to add `dependabot` with a weekly schedule.
### Why are the changes needed?
This will keep ORC community up-to-date and make the ORC community more efficiently by removing the burden of new dependency monitoring.
### How was this patch tested?
N/A
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
dongjoon-hyun commented on pull request #762:
URL: https://github.com/apache/orc/pull/762#issuecomment-886229808
Thank you, @wgtmac and @williamhyun !
Merged to main.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
dongjoon-hyun commented on pull request #762:
URL: https://github.com/apache/orc/pull/762#issuecomment-886071223
Yes, right. This one makes PRs to us and we can pin the dependencies when they are incompatible.
For example, Apache Avro and Druid projects are using this like that.
- https://github.com/apache/avro/blob/master/.github/dependabot.yml
- https://github.com/apache/druid/blob/master/.github/dependabot.yml
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] wgtmac commented on pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
wgtmac commented on pull request #762:
URL: https://github.com/apache/orc/pull/762#issuecomment-886070115
> Hi, @omalley , @wgtmac , @pgaref , @williamhyun .
> I'd like to add this to keep ORC community up-to-date and make the ORC community more efficiently by removing the burden of new dependency monitoring. WDYT?
It looks good and we need to be careful if the dependency update brings compatibility issue (e.g. breaking compression change)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun merged pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
dongjoon-hyun merged pull request #762:
URL: https://github.com/apache/orc/pull/762
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
dongjoon-hyun commented on pull request #762:
URL: https://github.com/apache/orc/pull/762#issuecomment-886071411
It's another benefit to have the list of the explicit pinning . It converts the implicit knowledges to the community-wide explicit one. I'll update the PR description.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [orc] dongjoon-hyun commented on pull request #762: ORC-860: Add dependabot
Posted by GitBox <gi...@apache.org>.
dongjoon-hyun commented on pull request #762:
URL: https://github.com/apache/orc/pull/762#issuecomment-886063928
Hi, @omalley , @wgtmac , @pgaref , @williamhyun .
I'd like to add this to keep ORC community up-to-date and make the ORC community more efficiently by removing the burden of new dependency monitoring. WDYT?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@orc.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org