You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@maven.apache.org by Slawomir Jaranowski <s....@gmail.com> on 2021/11/07 11:33:28 UTC

Dependabot and jira issues

Hi,

Dependabot is a very useful tool as we know.

Most of (probably all) Maven / ASF projects have dedicated jira projects to
track changes.

When we create PR with  jira issue reference in the PR title then "ASF
GitHub Bot" links PR with jira issue.

Maybe it will be useful (posible) when Dependabot create PR with dependency
updates "ASF GitHub Bot" can create corresponding issue for it and link
with PR?

Sometime issue about dependency updates is created manually and it can
happen that can be resolved by Dependabot PR, eg: [1]
But in most of situations we have updated project dependency without jira
tracking, eg: [2]

What do you think about such automatically possibility,
manually creating issue for each Dependabot PR can not works as we see.

[1] https://issues.apache.org/jira/browse/MPOM-267
[2] https://github.com/apache/maven-apache-parent/pull/54


-- 
Sławomir Jaranowski

https://twitter.com/SlawekJaran
https://github.com/slawekjaranowski
https://linkedin.com/in/slawomirjaranowski