You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@beam.apache.org by David Cavazos via dev <de...@beam.apache.org> on 2022/10/27 19:20:05 UTC
Beam starter projects dependency updates
Hi everyone!
We want to make sure the Beam starter projects always come with the latest
(compatible) versions for every dependency. I enabled Dependabot on all of
them to automate this as much as possible, and we have automated tests to
make sure everything works as expected.
However, we still need someone to merge Dependabot's PRs. The good news is
that since the starter projects are so simple, if tests pass they're most
likely safe to merge, and tests only take a couple minutes to run.
We could either batch update all dependencies as part of the release
process, or have people check them periodically (like an owner per
language).
These are all the repos we have to keep an eye to:
- https://github.com/apache/beam-starter-java -- 9 updates, all tests
passing
- https://github.com/apache/beam-starter-python -- 2 updates, all tests
passing
- https://github.com/apache/beam-starter-go -- 0 updates
- https://github.com/apache/beam-starter-kotlin -- 3 updates, all tests
passing
- https://github.com/apache/beam-starter-scala -- not done yet, but keep
an eye
Re: Beam starter projects dependency updates
Posted by Brian Hulette via dev <de...@beam.apache.org>.
These have all been addressed. I went through and merged all of them,
except for the slf4j-jdk14 dependency in Java and Kotlin. After consulting
with Luke [1] I told dependabot to ignore this dependency.
[1]
https://github.com/apache/beam-starter-java/pull/26#issuecomment-130263Java9941
<https://github.com/apache/beam-starter-java/pull/26#issuecomment-1302639941>
On Wed, Nov 2, 2022 at 10:58 AM David Cavazos <dc...@google.com> wrote:
> Hi, I just opened some PRs to auto-assign dependabot PRs.
>
> Java: https://github.com/apache/beam-starter-java/pull/29
> Python: https://github.com/apache/beam-starter-python/pull/11
> Go: https://github.com/apache/beam-starter-go/pull/7
> Kotlin: https://github.com/apache/beam-starter-kotlin/pull/9
>
> For the existing dependabot PRs, can someone help me batch merge them? All
> tests are passing on all of them, so they should all be safe to merge.
>
> On Thu, Oct 27, 2022 at 1:56 PM Brian Hulette <bh...@google.com> wrote:
>
>> Could we just use the same set of reviewers as pr-bot in the main repo
>> [1]? I don't think that we could avoid duplicating the data though.
>>
>> [1]
>> https://github.com/apache/beam/blob/728e8ecc8a40d3d578ada7773b77eca2b3c68d03/.github/REVIEWERS.yml
>>
>> On Thu, Oct 27, 2022 at 12:20 PM David Cavazos via dev <
>> dev@beam.apache.org> wrote:
>>
>>> Hi everyone!
>>>
>>> We want to make sure the Beam starter projects always come with the
>>> latest (compatible) versions for every dependency. I enabled Dependabot on
>>> all of them to automate this as much as possible, and we have automated
>>> tests to make sure everything works as expected.
>>>
>>> However, we still need someone to merge Dependabot's PRs. The good news
>>> is that since the starter projects are so simple, if tests pass they're
>>> most likely safe to merge, and tests only take a couple minutes to run.
>>>
>>> We could either batch update all dependencies as part of the release
>>> process, or have people check them periodically (like an owner per
>>> language).
>>>
>>> These are all the repos we have to keep an eye to:
>>>
>>> - https://github.com/apache/beam-starter-java -- 9 updates, all
>>> tests passing
>>> - https://github.com/apache/beam-starter-python -- 2 updates, all
>>> tests passing
>>> - https://github.com/apache/beam-starter-go -- 0 updates
>>> - https://github.com/apache/beam-starter-kotlin -- 3 updates, all
>>> tests passing
>>> - https://github.com/apache/beam-starter-scala -- not done yet, but
>>> keep an eye
>>>
>>>
Re: Beam starter projects dependency updates
Posted by David Cavazos via dev <de...@beam.apache.org>.
Hi, I just opened some PRs to auto-assign dependabot PRs.
Java: https://github.com/apache/beam-starter-java/pull/29
Python: https://github.com/apache/beam-starter-python/pull/11
Go: https://github.com/apache/beam-starter-go/pull/7
Kotlin: https://github.com/apache/beam-starter-kotlin/pull/9
For the existing dependabot PRs, can someone help me batch merge them? All
tests are passing on all of them, so they should all be safe to merge.
On Thu, Oct 27, 2022 at 1:56 PM Brian Hulette <bh...@google.com> wrote:
> Could we just use the same set of reviewers as pr-bot in the main repo
> [1]? I don't think that we could avoid duplicating the data though.
>
> [1]
> https://github.com/apache/beam/blob/728e8ecc8a40d3d578ada7773b77eca2b3c68d03/.github/REVIEWERS.yml
>
> On Thu, Oct 27, 2022 at 12:20 PM David Cavazos via dev <
> dev@beam.apache.org> wrote:
>
>> Hi everyone!
>>
>> We want to make sure the Beam starter projects always come with the
>> latest (compatible) versions for every dependency. I enabled Dependabot on
>> all of them to automate this as much as possible, and we have automated
>> tests to make sure everything works as expected.
>>
>> However, we still need someone to merge Dependabot's PRs. The good news
>> is that since the starter projects are so simple, if tests pass they're
>> most likely safe to merge, and tests only take a couple minutes to run.
>>
>> We could either batch update all dependencies as part of the release
>> process, or have people check them periodically (like an owner per
>> language).
>>
>> These are all the repos we have to keep an eye to:
>>
>> - https://github.com/apache/beam-starter-java -- 9 updates, all tests
>> passing
>> - https://github.com/apache/beam-starter-python -- 2 updates, all
>> tests passing
>> - https://github.com/apache/beam-starter-go -- 0 updates
>> - https://github.com/apache/beam-starter-kotlin -- 3 updates, all
>> tests passing
>> - https://github.com/apache/beam-starter-scala -- not done yet, but
>> keep an eye
>>
>>
Re: Beam starter projects dependency updates
Posted by Brian Hulette via dev <de...@beam.apache.org>.
Could we just use the same set of reviewers as pr-bot in the main repo [1]?
I don't think that we could avoid duplicating the data though.
[1]
https://github.com/apache/beam/blob/728e8ecc8a40d3d578ada7773b77eca2b3c68d03/.github/REVIEWERS.yml
On Thu, Oct 27, 2022 at 12:20 PM David Cavazos via dev <de...@beam.apache.org>
wrote:
> Hi everyone!
>
> We want to make sure the Beam starter projects always come with the latest
> (compatible) versions for every dependency. I enabled Dependabot on all of
> them to automate this as much as possible, and we have automated tests to
> make sure everything works as expected.
>
> However, we still need someone to merge Dependabot's PRs. The good news is
> that since the starter projects are so simple, if tests pass they're most
> likely safe to merge, and tests only take a couple minutes to run.
>
> We could either batch update all dependencies as part of the release
> process, or have people check them periodically (like an owner per
> language).
>
> These are all the repos we have to keep an eye to:
>
> - https://github.com/apache/beam-starter-java -- 9 updates, all tests
> passing
> - https://github.com/apache/beam-starter-python -- 2 updates, all
> tests passing
> - https://github.com/apache/beam-starter-go -- 0 updates
> - https://github.com/apache/beam-starter-kotlin -- 3 updates, all
> tests passing
> - https://github.com/apache/beam-starter-scala -- not done yet, but
> keep an eye
>
>