You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@fineract.apache.org by "Michael Vorburger (Jira)" <ji...@apache.org> on 2020/06/07 11:01:00 UTC
[jira] [Comment Edited] (FINERACT-962) Use Renovate for Fineract
[ https://issues.apache.org/jira/browse/FINERACT-962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17127588#comment-17127588 ]
Michael Vorburger edited comment on FINERACT-962 at 6/7/20, 11:00 AM:
----------------------------------------------------------------------
[https://github.com/apache/fineract/pulls?q=label%3Arenovate+] has suggested upgrades, but only 4, so far.. I expected that there would be many more proposed, especially given everything Dependabot found during my evaluation on [https://github.com/vorburger/fineract/pulls.] (At least some of which we've meanwhile already done, before Renovate; I'll try to somehow get Dependabot to do a new round and close what it can but am facing https://github.com/dependabot/feedback/issues/955; but I bet there will still be some left even after that's solved...)
FINERACT-1002 may actually help for Renovate to identify more? I've just merged that - let's see if Renovate will propose any more upgrades now. I expect Renovate should soon propose to upgrade activemq-broker to 5.15.13 instead of 5.15.12 (see comment on [https://github.com/apache/fineract/pull/977]), if it works with the BOM stuff... ?
[https://app.renovatebot.com/dashboard#github/apache/fineract] seem to try other upgrades as well? For example, if I interpret that log correctly, apparently it attempts to upgrade our Gradle version (which would be great!), but then doesn't send a PR for it... [~rarkins] you would probably know why?
was (Author: vorburger):
[https://github.com/apache/fineract/pulls?q=label%3Arenovate+] has suggested upgrades, but only 4, so far.. I expected that there would be many more proposed, especially given everything Dependabot found during my evaluation on [https://github.com/vorburger/fineract/pulls.] (At least some of which we've meanwhile already done, before Renovate; I'll try to somehow get Dependabot to do a new round and close what it can; but I bet there will still be some left...)
FINERACT-1002 may actually help for Renovate to identify more? I've just merged that - let's see if Renovate will propose any more upgrades now. I expect Renovate should soon propose to upgrade activemq-broker to 5.15.13 instead of 5.15.12 (see comment on https://github.com/apache/fineract/pull/977), if it works with the BOM stuff... ?
[https://app.renovatebot.com/dashboard#github/apache/fineract] seem to try other upgrades as well? For example, if I interpret that log correctly, apparently it attempts to upgrade our Gradle version (which would be great!), but then doesn't send a PR for it... [~rarkins] you would probably know why?
> Use Renovate for Fineract
> --------------------------
>
> Key: FINERACT-962
> URL: https://issues.apache.org/jira/browse/FINERACT-962
> Project: Apache Fineract
> Issue Type: Sub-task
> Components: Build
> Reporter: Michael Vorburger
> Assignee: Michael Vorburger
> Priority: Major
> Labels: dependencies, tech-debt, technical
> Fix For: 1.4.0
>
>
> https://renovate.whitesourcesoftware.com
> Based solely on comparing the initial list on https://github.com/vorburger/fineract/pull/2 VS https://github.com/vorburger/fineract/pulls?q=is%3Apr+author%3Aapp%2Fdependabot-preview+, Renovate and Dependabot seem to find similar results. It could still be fun to run them both?
> INFRA-19586 explains that ASF can't accept the Renovate GitHub App.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)