You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@commons.apache.org by Gilles Sadowski <gi...@gmail.com> on 2021/06/03 16:22:10 UTC
[Geometry] Git cleanup
Hello.
What's the purpose of all those "dependabot" branches?
$ git branch -a
1.0-beta1-release
* master
remotes/github/master
remotes/origin/1.0-beta1-release
remotes/origin/GEOMETRY-53
remotes/origin/GEOMETRY-54
remotes/origin/GEOMETRY-56
remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
remotes/origin/dependabot/maven/jmh.version-1.27
remotes/origin/dependabot/maven/jmh.version-1.32
remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
remotes/origin/master
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Geometry] Git cleanup
Posted by Gilles Sadowski <gi...@gmail.com>.
Le ven. 4 juin 2021 à 21:57, Benjamin Marwell <bm...@apache.org> a écrit :
>
> > see such brances here:
> > https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> > but not in any of:
> > https://gitbox.apache.org/repos/asf?p=commons-math.git
> >
>
> You need to look here instead:
> https://github.com/apache/commons-geometry/blob/master/.github/dependabot.yml
> <- dependabot activated
> https://github.com/apache/commons-math <-- no dependabot activated
The piece I was missing.
> PMCs/Committers can activate the bot per repo (or Infra, I actually don't know).
> Since it is not activated on the latter three repos, there is no
> dependabot activity and hence nothing to sync over to gitbox.
>
> > There must be, since we don't see all the other PRs.
>
> There are PRs in the enabled repos:
> https://github.com/apache/commons-geometry/pulls/app%2Fdependabot
>
> And there are non in the repos where dependabot is not enabled:
> https://github.com/apache/commons-math/pulls/app%2Fdependabot
>
> Nothing unexpected here, is there?
No, once you know where to look.
Tracking this piece of information, we get
https://issues.apache.org/jira/browse/GEOMETRY-104
I agree with what Alex said in the first part of his comment
there: No added value...
> > $ git branch -a
> > there are about "dependabot" lines that clutter the output.
>
> dependabot does not create the PRs by forking the repo and creating
> PRs from its branches.
> Instead you give dependabot write access to the Apache repo.
I don't recall that we ever agreed on such a behaviour.
I interpret the second part of the comment ("Feel free to try out
dependabot") as this experiment having no impact on other users
of the repository.
IOW, this should have been a feature to be managed through
github, not showing up on gitbox.
> The branches are created there, directly in the Apache repo.
> This is why you see them when doing $ git branch -a.
>
> If you don't want to see them, why not exclude them in your local
> clone (.git/config)?
> Like so:
> https://stackoverflow.com/a/37165609/1549977
I don't think that non-users having to work around is the proper
solution.
Thanks,
Gilles
>
>
>
> Am Fr., 4. Juni 2021 um 19:20 Uhr schrieb Gilles Sadowski
> <gi...@gmail.com>:
> >
> > Le jeu. 3 juin 2021 à 21:49, Benjamin Marwell <bm...@apache.org> a écrit :
> > >
> > > Ah yes, branches are being synced over, of course.
> >
> > ?
> >
> > I see such brances here:
> > https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> > but not in any of:
> > https://gitbox.apache.org/repos/asf?p=commons-math.git
> > https://gitbox.apache.org/repos/asf?p=commons-rng.git
> > https://gitbox.apache.org/repos/asf?p=commons-numbers.git
> >
> > Hence my wondering about what config is causing the different behaviours.
> >
> > > On GitHub, just go to the Pull Requests tab and either merge them or close
> > > them. There is not much more to it.
> >
> > There must be, since we don't see all the other PRs.
> >
> > > If you are not a committer, you can safely ignore them.
> >
> > Well, I'd like to know how to achieve that.
> > For example, doing
> > $ git branch -a
> > there are about "dependabot" lines that clutter the output.
> >
> > Regards,
> > Gilles
> >
> > >
> > > You probably have googled dependabot at this point, but just in case here
> > > is a quick overview:
> > >
> > > https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
> > >
> > >
> > > On Thu, 3 Jun 2021, 19:43 Gilles Sadowski, <gi...@gmail.com> wrote:
> > >
> > > > Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <bm...@apache.org> a
> > > > écrit :
> > > > >
> > > > > It's a bot which creates a PR on GitHub for each dependency update.
> > > > >
> > > > > You won't see it in the Apache git probably.
> > > >
> > > > They are listed as "origin" which is the ASF repository:
> > > > $ git remote -v
> > > > github https://github.com/apache/commons-geometry.git (fetch)
> > > > github https://github.com/apache/commons-geometry.git (push)
> > > > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch)
> > > > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push)
> > > >
> > > > And some of the branches (why not all?) are listed here:
> > > > https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> > > >
> > > > >
> > > > > You can disable the bot using a config file or exclude some dependencies
> > > > > etc.
> > > >
> > > > Indeed, is this intended or is there a misconfiguration somewhere?
> > > >
> > > >
> > > > Gilles
> > > >
> > > > >
> > > > > Most projects use it by now, but often major updates are being closed and
> > > > > manually updated instead.
> > > > >
> > > > >
> > > > > On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
> > > > >
> > > > > > Hello.
> > > > > >
> > > > > > What's the purpose of all those "dependabot" branches?
> > > > > >
> > > > > > $ git branch -a
> > > > > > 1.0-beta1-release
> > > > > > * master
> > > > > > remotes/github/master
> > > > > > remotes/origin/1.0-beta1-release
> > > > > > remotes/origin/GEOMETRY-53
> > > > > > remotes/origin/GEOMETRY-54
> > > > > > remotes/origin/GEOMETRY-56
> > > > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
> > > > > >
> > > > > >
> > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
> > > > > >
> > > > > >
> > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
> > > > > >
> > > > > >
> > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> > > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> > > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> > > > > >
> > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> > > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> > > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> > > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> > > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> > > > > > remotes/origin/dependabot/maven/jmh.version-1.27
> > > > > > remotes/origin/dependabot/maven/jmh.version-1.32
> > > > > >
> > > > > >
> > > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
> > > > > >
> > > > > >
> > > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> > > > > >
> > > > remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> > > > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> > > > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> > > > > > remotes/origin/master
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Geometry] Git cleanup
Posted by Benjamin Marwell <bm...@apache.org>.
> see such brances here:
> https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> but not in any of:
> https://gitbox.apache.org/repos/asf?p=commons-math.git
>
You need to look here instead:
https://github.com/apache/commons-geometry/blob/master/.github/dependabot.yml
<- dependabot activated
https://github.com/apache/commons-math <-- no dependabot activated
PMCs/Committers can activate the bot per repo (or Infra, I actually don't know).
Since it is not activated on the latter three repos, there is no
dependabot activity and hence nothing to sync over to gitbox.
> There must be, since we don't see all the other PRs.
There are PRs in the enabled repos:
https://github.com/apache/commons-geometry/pulls/app%2Fdependabot
And there are non in the repos where dependabot is not enabled:
https://github.com/apache/commons-math/pulls/app%2Fdependabot
Nothing unexpected here, is there?
> $ git branch -a
> there are about "dependabot" lines that clutter the output.
dependabot does not create the PRs by forking the repo and creating
PRs from its branches.
Instead you give dependabot write access to the Apache repo.
The branches are created there, directly in the Apache repo.
This is why you see them when doing $ git branch -a.
If you don't want to see them, why not exclude them in your local
clone (.git/config)?
Like so:
https://stackoverflow.com/a/37165609/1549977
Am Fr., 4. Juni 2021 um 19:20 Uhr schrieb Gilles Sadowski
<gi...@gmail.com>:
>
> Le jeu. 3 juin 2021 à 21:49, Benjamin Marwell <bm...@apache.org> a écrit :
> >
> > Ah yes, branches are being synced over, of course.
>
> ?
>
> I see such brances here:
> https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> but not in any of:
> https://gitbox.apache.org/repos/asf?p=commons-math.git
> https://gitbox.apache.org/repos/asf?p=commons-rng.git
> https://gitbox.apache.org/repos/asf?p=commons-numbers.git
>
> Hence my wondering about what config is causing the different behaviours.
>
> > On GitHub, just go to the Pull Requests tab and either merge them or close
> > them. There is not much more to it.
>
> There must be, since we don't see all the other PRs.
>
> > If you are not a committer, you can safely ignore them.
>
> Well, I'd like to know how to achieve that.
> For example, doing
> $ git branch -a
> there are about "dependabot" lines that clutter the output.
>
> Regards,
> Gilles
>
> >
> > You probably have googled dependabot at this point, but just in case here
> > is a quick overview:
> >
> > https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
> >
> >
> > On Thu, 3 Jun 2021, 19:43 Gilles Sadowski, <gi...@gmail.com> wrote:
> >
> > > Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <bm...@apache.org> a
> > > écrit :
> > > >
> > > > It's a bot which creates a PR on GitHub for each dependency update.
> > > >
> > > > You won't see it in the Apache git probably.
> > >
> > > They are listed as "origin" which is the ASF repository:
> > > $ git remote -v
> > > github https://github.com/apache/commons-geometry.git (fetch)
> > > github https://github.com/apache/commons-geometry.git (push)
> > > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch)
> > > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push)
> > >
> > > And some of the branches (why not all?) are listed here:
> > > https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> > >
> > > >
> > > > You can disable the bot using a config file or exclude some dependencies
> > > > etc.
> > >
> > > Indeed, is this intended or is there a misconfiguration somewhere?
> > >
> > >
> > > Gilles
> > >
> > > >
> > > > Most projects use it by now, but often major updates are being closed and
> > > > manually updated instead.
> > > >
> > > >
> > > > On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
> > > >
> > > > > Hello.
> > > > >
> > > > > What's the purpose of all those "dependabot" branches?
> > > > >
> > > > > $ git branch -a
> > > > > 1.0-beta1-release
> > > > > * master
> > > > > remotes/github/master
> > > > > remotes/origin/1.0-beta1-release
> > > > > remotes/origin/GEOMETRY-53
> > > > > remotes/origin/GEOMETRY-54
> > > > > remotes/origin/GEOMETRY-56
> > > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
> > > > >
> > > > >
> > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
> > > > >
> > > > >
> > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
> > > > >
> > > > >
> > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> > > > >
> > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> > > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> > > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> > > > > remotes/origin/dependabot/maven/jmh.version-1.27
> > > > > remotes/origin/dependabot/maven/jmh.version-1.32
> > > > >
> > > > >
> > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
> > > > >
> > > > >
> > > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> > > > >
> > > remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> > > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> > > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> > > > > remotes/origin/master
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > > For additional commands, e-mail: dev-help@commons.apache.org
> > >
> > >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Geometry] Git cleanup
Posted by Gilles Sadowski <gi...@gmail.com>.
Le jeu. 3 juin 2021 à 21:49, Benjamin Marwell <bm...@apache.org> a écrit :
>
> Ah yes, branches are being synced over, of course.
?
I see such brances here:
https://gitbox.apache.org/repos/asf?p=commons-geometry.git
but not in any of:
https://gitbox.apache.org/repos/asf?p=commons-math.git
https://gitbox.apache.org/repos/asf?p=commons-rng.git
https://gitbox.apache.org/repos/asf?p=commons-numbers.git
Hence my wondering about what config is causing the different behaviours.
> On GitHub, just go to the Pull Requests tab and either merge them or close
> them. There is not much more to it.
There must be, since we don't see all the other PRs.
> If you are not a committer, you can safely ignore them.
Well, I'd like to know how to achieve that.
For example, doing
$ git branch -a
there are about "dependabot" lines that clutter the output.
Regards,
Gilles
>
> You probably have googled dependabot at this point, but just in case here
> is a quick overview:
>
> https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
>
>
> On Thu, 3 Jun 2021, 19:43 Gilles Sadowski, <gi...@gmail.com> wrote:
>
> > Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <bm...@apache.org> a
> > écrit :
> > >
> > > It's a bot which creates a PR on GitHub for each dependency update.
> > >
> > > You won't see it in the Apache git probably.
> >
> > They are listed as "origin" which is the ASF repository:
> > $ git remote -v
> > github https://github.com/apache/commons-geometry.git (fetch)
> > github https://github.com/apache/commons-geometry.git (push)
> > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch)
> > origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push)
> >
> > And some of the branches (why not all?) are listed here:
> > https://gitbox.apache.org/repos/asf?p=commons-geometry.git
> >
> > >
> > > You can disable the bot using a config file or exclude some dependencies
> > > etc.
> >
> > Indeed, is this intended or is there a misconfiguration somewhere?
> >
> >
> > Gilles
> >
> > >
> > > Most projects use it by now, but often major updates are being closed and
> > > manually updated instead.
> > >
> > >
> > > On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
> > >
> > > > Hello.
> > > >
> > > > What's the purpose of all those "dependabot" branches?
> > > >
> > > > $ git branch -a
> > > > 1.0-beta1-release
> > > > * master
> > > > remotes/github/master
> > > > remotes/origin/1.0-beta1-release
> > > > remotes/origin/GEOMETRY-53
> > > > remotes/origin/GEOMETRY-54
> > > > remotes/origin/GEOMETRY-56
> > > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
> > > >
> > > >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
> > > >
> > > >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
> > > >
> > > >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> > > >
> > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> > > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> > > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> > > > remotes/origin/dependabot/maven/jmh.version-1.27
> > > > remotes/origin/dependabot/maven/jmh.version-1.32
> > > >
> > > >
> > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
> > > >
> > > >
> > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> > > >
> > remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> > > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> > > > remotes/origin/master
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > For additional commands, e-mail: dev-help@commons.apache.org
> >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Geometry] Git cleanup
Posted by Benjamin Marwell <bm...@apache.org>.
Ah yes, branches are being synced over, of course.
On GitHub, just go to the Pull Requests tab and either merge them or close
them. There is not much more to it.
If you are not a committer, you can safely ignore them.
You probably have googled dependabot at this point, but just in case here
is a quick overview:
https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/
On Thu, 3 Jun 2021, 19:43 Gilles Sadowski, <gi...@gmail.com> wrote:
> Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <bm...@apache.org> a
> écrit :
> >
> > It's a bot which creates a PR on GitHub for each dependency update.
> >
> > You won't see it in the Apache git probably.
>
> They are listed as "origin" which is the ASF repository:
> $ git remote -v
> github https://github.com/apache/commons-geometry.git (fetch)
> github https://github.com/apache/commons-geometry.git (push)
> origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch)
> origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push)
>
> And some of the branches (why not all?) are listed here:
> https://gitbox.apache.org/repos/asf?p=commons-geometry.git
>
> >
> > You can disable the bot using a config file or exclude some dependencies
> > etc.
>
> Indeed, is this intended or is there a misconfiguration somewhere?
>
>
> Gilles
>
> >
> > Most projects use it by now, but often major updates are being closed and
> > manually updated instead.
> >
> >
> > On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
> >
> > > Hello.
> > >
> > > What's the purpose of all those "dependabot" branches?
> > >
> > > $ git branch -a
> > > 1.0-beta1-release
> > > * master
> > > remotes/github/master
> > > remotes/origin/1.0-beta1-release
> > > remotes/origin/GEOMETRY-53
> > > remotes/origin/GEOMETRY-54
> > > remotes/origin/GEOMETRY-56
> > > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
> > >
> > >
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
> > >
> > >
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
> > >
> > >
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> > >
> remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> > > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> > > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> > > remotes/origin/dependabot/maven/jmh.version-1.27
> > > remotes/origin/dependabot/maven/jmh.version-1.32
> > >
> > >
> remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
> > >
> > >
> remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> > >
> remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> > > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> > > remotes/origin/master
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>
Re: [Geometry] Git cleanup
Posted by Gilles Sadowski <gi...@gmail.com>.
Le jeu. 3 juin 2021 à 19:18, Benjamin Marwell <bm...@apache.org> a écrit :
>
> It's a bot which creates a PR on GitHub for each dependency update.
>
> You won't see it in the Apache git probably.
They are listed as "origin" which is the ASF repository:
$ git remote -v
github https://github.com/apache/commons-geometry.git (fetch)
github https://github.com/apache/commons-geometry.git (push)
origin https://gitbox.apache.org/repos/asf/commons-geometry.git (fetch)
origin https://gitbox.apache.org/repos/asf/commons-geometry.git (push)
And some of the branches (why not all?) are listed here:
https://gitbox.apache.org/repos/asf?p=commons-geometry.git
>
> You can disable the bot using a config file or exclude some dependencies
> etc.
Indeed, is this intended or is there a misconfiguration somewhere?
Gilles
>
> Most projects use it by now, but often major updates are being closed and
> manually updated instead.
>
>
> On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
>
> > Hello.
> >
> > What's the purpose of all those "dependabot" branches?
> >
> > $ git branch -a
> > 1.0-beta1-release
> > * master
> > remotes/github/master
> > remotes/origin/1.0-beta1-release
> > remotes/origin/GEOMETRY-53
> > remotes/origin/GEOMETRY-54
> > remotes/origin/GEOMETRY-56
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
> >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
> >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
> >
> > remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> > remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> > remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> > remotes/origin/dependabot/maven/jmh.version-1.27
> > remotes/origin/dependabot/maven/jmh.version-1.32
> >
> > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
> >
> > remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> > remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> > remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> > remotes/origin/master
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [Geometry] Git cleanup
Posted by Benjamin Marwell <bm...@apache.org>.
It's a bot which creates a PR on GitHub for each dependency update.
You won't see it in the Apache git probably.
You can disable the bot using a config file or exclude some dependencies
etc.
Most projects use it by now, but often major updates are being closed and
manually updated instead.
On Thu, 3 Jun 2021, 18:23 Gilles Sadowski, <gi...@gmail.com> wrote:
> Hello.
>
> What's the purpose of all those "dependabot" branches?
>
> $ git branch -a
> 1.0-beta1-release
> * master
> remotes/github/master
> remotes/origin/1.0-beta1-release
> remotes/origin/GEOMETRY-53
> remotes/origin/GEOMETRY-54
> remotes/origin/GEOMETRY-56
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-4.2.0
>
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.1.4
>
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.0
>
> remotes/origin/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.2.2
> remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.38
> remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.39
> remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.41.1
> remotes/origin/dependabot/maven/com.puppycrawl.tools-checkstyle-8.43
> remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.30.0
> remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.31.0
> remotes/origin/dependabot/maven/geometry.pmd.dep.version-6.35.0
> remotes/origin/dependabot/maven/jmh.version-1.27
> remotes/origin/dependabot/maven/jmh.version-1.32
>
> remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-checkstyle-plugin-3.1.2
>
> remotes/origin/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.14.0
> remotes/origin/dependabot/maven/org.ekstazi-ekstazi-maven-plugin-5.3.0
> remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.1
> remotes/origin/dependabot/maven/org.junit-junit-bom-5.7.2
> remotes/origin/master
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>