You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@logging.apache.org by pk...@apache.org on 2022/05/23 16:10:17 UTC

[logging-log4j2] branch ppkarwasz-dependabot created (now 667a1fa155)

This is an automated email from the ASF dual-hosted git repository.

pkarwasz pushed a change to branch ppkarwasz-dependabot
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git


      at 667a1fa155 Increase to 50 dependabot proposals

This branch includes the following new commits:

     new 667a1fa155 Increase to 50 dependabot proposals

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

[logging-log4j2] 01/01: Increase to 50 dependabot proposals

Posted by pk...@apache.org.

This is an automated email from the ASF dual-hosted git repository.

pkarwasz pushed a commit to branch ppkarwasz-dependabot
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git

commit 667a1fa155b981806ca815b94ffb36f7505e5352
Author: ppkarwasz <pi...@karwasz.org>
AuthorDate: Mon May 23 18:10:09 2022 +0200

    Increase to 50 dependabot proposals
    
    We have 38 upgradeable dependencies. In order to limit the annoyance from Dependabot PRs, I propose to limit the number of `test` scope upgrade proposals to 10 and to give a larger number (50) for the remaining ones.
    
    Another solution would be to prioritize the number of upgrade proposals for `log4j-api` and `log4j-core` and limit those for the remaining modules.
---
 .github/dependabot.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d0e9890e77..e8514561a2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,9 +16,17 @@
 #
 version: 2
 updates:
+# No more than 10 PRs for dependencies with a `test` scope
 - package-ecosystem: maven
   directory: "/"
   schedule:
     interval: daily
-    time: '04:00'
+  allow: development
   open-pull-requests-limit: 10
+# 50 PRs for the remaining dependencies (`compile` and Maven plugins)
+- package-ecosystem: maven
+  directory: "/"
+  schedule:
+    interval: daily
+  allow: production
+  open-pull-requests-limit: 50