You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@spark.apache.org by GitBox <gi...@apache.org> on 2021/10/03 17:29:35 UTC
[GitHub] [spark] naveensrinivasan opened a new pull request #34165: Enable Dependabot for improving security posture of the dependencies
naveensrinivasan opened a new pull request #34165:
URL: https://github.com/apache/spark/pull/34165
### What changes were proposed in this pull request?
Enable dependabot to get security updates and if needed version updates on dependencies
### Why are the changes needed?
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically
Having knowledge about vulnerabilities of the dependencies helps the project owners decide on their dependencies security posture to make decisions.
If the project decides to get updates only on security updates and not on any version updates then setting these options would not open any PR 's `open-pull-requests-limit: 0`
### Does this PR introduce _any_ user-facing change?
NO
This option has to be enabled in the security section of the project.
https://docs.github.com/en/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/configuring-dependabot-security-updates#managing-dependabot-security-updates-for-your-repositories
### How was this patch tested?
N/A
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] github-actions[bot] closed pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
github-actions[bot] closed pull request #34165:
URL: https://github.com/apache/spark/pull/34165
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936533700
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48392/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937394545
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936545607
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143879/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933750958
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48329/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936541918
**[Test build #143879 has finished](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143879/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
* This patch **fails PySpark unit tests**.
* This patch merges cleanly.
* This patch adds no public classes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933694615
Kubernetes integration test starting
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48329/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936545607
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143879/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936533700
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48392/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937377915
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937315268
This can't be related to tests of anything in Spark, right? spurious test failures. We can just merge?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937320982
What setting do you mean?
Here I just mean, the test failures above really can't have anything to do with dependabot, so, not sure it is worth triggering again.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936895086
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143884/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936227421
Jenkins test this please
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936887617
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48397/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936895086
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143884/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936270157
**[Test build #143879 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143879/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937360368
Jenkins retest this please
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936887617
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48397/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937400093
cc @dongjoon-hyun @gengliangwang too who might also be interested in this.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933794904
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143816/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933659775
**[Test build #143816 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143816/testReport)** for PR 34165 at commit [`1d1b223`](https://github.com/apache/spark/commit/1d1b22380ce1dda8940dfa10ff6b23ff1114d055).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937399243
Therefore, I would like to make sure testing this in the forked repo where the author has full control.
BTW does it cover Python and R too?
Also We will probably just enable alerts alone only instead of automatic enable otherwise there will be a bunch of automatic PRs (see https://github.blog/2020-06-01-keep-all-your-packages-up-to-date-with-dependabot/)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936240485
It would be great if we can make sure this patch was tested e.g., in your forked repository.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937321511
> What setting do you mean?
> Here I just mean, the test failures above really can't have anything to do with dependabot, so, not sure it is worth triggering again.
I am not referring to the test failures. The dependabot settings are there in https://github.com/apache/spark/security
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937394545
For dependabot, I believe committers (who only hold write access) don't have the permission. It's under `Settings`
<img width="871" alt="Screen Shot 2021-10-07 at 11 30 29 AM" src="https://user-images.githubusercontent.com/6477701/136310941-d3803f04-54aa-4f35-861e-6ca9d26cc13f.png">
This has to be enabled via INFRA team.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on a change in pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on a change in pull request #34165:
URL: https://github.com/apache/spark/pull/34165#discussion_r721830157
##########
File path: .github/dependabot.yml
##########
@@ -0,0 +1,16 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+ - package-ecosystem: "maven" # See documentation for possible values
+ directory: "/" # Location of package manifests
+ schedule:
+ interval: "weekly"
+ # Maintain dependencies for GitHub Actions
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "wekkly"
Review comment:
Took care of it. Thanks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937399700
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48413/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen edited a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen edited a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937315268
This change can't even affect anything in Spark, right? spurious test failures. We can just merge?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933794904
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143816/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933678553
> I think it's OK. The static analyzers like this tend to throw up more noise than anything, but, if it turns up an easy update once in a while it is worth it. Can it be more like 'weekly'?
I have updated it. Thanks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937372353
**[Test build #143899 has finished](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143899/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
* This patch passes all tests.
* This patch merges cleanly.
* This patch adds no public classes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937360309
I dont' see dependabot settings there (but I do in other repos) - either we don't somehow have permission, or it just needs this change to be merged. Anyway I think we can merge this but let me just see if I can shake off that flaky test failure for fun
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936771677
Kubernetes integration test starting
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48397/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936342767
Kubernetes integration test starting
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48392/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937315268
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936892156
**[Test build #143884 has finished](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143884/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
* This patch **fails Spark unit tests**.
* This patch merges cleanly.
* This patch adds no public classes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on a change in pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on a change in pull request #34165:
URL: https://github.com/apache/spark/pull/34165#discussion_r726129932
##########
File path: .github/dependabot.yml
##########
@@ -0,0 +1,16 @@
+# To get started with Dependabot version updates, you'll need to specify which
Review comment:
I included it. Thanks.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937319765
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937361781
**[Test build #143899 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143899/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937377915
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143899/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936270157
**[Test build #143879 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143879/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933632773
> Jenkins test this please
I can update that. Thanks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933750958
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48329/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937398221
Kubernetes integration test status failure
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48413/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA removed a comment on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933659775
**[Test build #143816 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143816/testReport)** for PR 34165 at commit [`1d1b223`](https://github.com/apache/spark/commit/1d1b22380ce1dda8940dfa10ff6b23ff1114d055).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933771715
**[Test build #143816 has finished](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143816/testReport)** for PR 34165 at commit [`1d1b223`](https://github.com/apache/spark/commit/1d1b22380ce1dda8940dfa10ff6b23ff1114d055).
* This patch passes all tests.
* This patch merges cleanly.
* This patch adds no public classes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937376689
Kubernetes integration test starting
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48413/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937319765
> This change can't even affect anything in Spark, right? spurious test failures. We can just merge?
Has the setting been enabled in the Repository?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937399700
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder-K8s/48413/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936855819
Kubernetes integration test status failure
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48397/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on a change in pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on a change in pull request #34165:
URL: https://github.com/apache/spark/pull/34165#discussion_r721829654
##########
File path: .github/dependabot.yml
##########
@@ -0,0 +1,16 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+ - package-ecosystem: "maven" # See documentation for possible values
+ directory: "/" # Location of package manifests
+ schedule:
+ interval: "weekly"
+ # Maintain dependencies for GitHub Actions
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "wekkly"
Review comment:
Seems like a typo? wekkly
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] github-actions[bot] commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
github-actions[bot] commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-1018038056
We're closing this PR because it hasn't been updated in a while. This isn't a judgement on the merit of the PR in any way. It's just a way of keeping the PR queue manageable.
If you'd like to revive this PR, please reopen it and ask a committer to remove the Stale tag!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933620289
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-932993895
Can one of the admins verify this patch?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937361781
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937361781
**[Test build #143899 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143899/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936498074
Kubernetes integration test status failure
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48392/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937377915
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen edited a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen edited a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937315268
This change can't even affect anything in Spark, right? spurious test failures. We can just merge?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] srowen commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
srowen commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936664347
Jenkins retest this please
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon commented on a change in pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon commented on a change in pull request #34165:
URL: https://github.com/apache/spark/pull/34165#discussion_r723269237
##########
File path: .github/dependabot.yml
##########
@@ -0,0 +1,16 @@
+# To get started with Dependabot version updates, you'll need to specify which
Review comment:
Can we add Apache License header?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936669027
**[Test build #143884 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143884/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-936669027
**[Test build #143884 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143884/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA commented on pull request #34165: [SPARK-36916] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-933737820
Kubernetes integration test status failure
URL: https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder-K8s/48329/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon edited a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon edited a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937394545
For dependabot, I believe committers (who only hold write access) don't have the permission. It's under `Settings`
<img width="871" alt="Screen Shot 2021-10-07 at 11 30 29 AM" src="https://user-images.githubusercontent.com/6477701/136310941-d3803f04-54aa-4f35-861e-6ca9d26cc13f.png">
This has to be enabled via INFRA team. Examples:
- https://issues.apache.org/jira/browse/INFRA-22025
- https://issues.apache.org/jira/browse/INFRA-18306
- https://issues.apache.org/jira/browse/INFRA-21900
- https://issues.apache.org/jira/browse/INFRA-21049
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] SparkQA removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
SparkQA removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937361781
**[Test build #143899 has started](https://amplab.cs.berkeley.edu/jenkins/job/SparkPullRequestBuilder/143899/testReport)** for PR 34165 at commit [`b3496f9`](https://github.com/apache/spark/commit/b3496f90ed1990a097391eb89be5063e5d76b473).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] HyukjinKwon edited a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
HyukjinKwon edited a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937394545
For dependabot, I believe committers (who only hold write access) don't have the permission. It's under `Settings`
<img width="871" alt="Screen Shot 2021-10-07 at 11 30 29 AM" src="https://user-images.githubusercontent.com/6477701/136310941-d3803f04-54aa-4f35-861e-6ca9d26cc13f.png">
This has to be enabled via INFRA team. Examples:
- https://issues.apache.org/jira/browse/INFRA-22025
- https://issues.apache.org/jira/browse/INFRA-18306
- https://issues.apache.org/jira/browse/INFRA-21900
- https://issues.apache.org/jira/browse/INFRA-21049
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins removed a comment on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins removed a comment on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-937377915
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/143899/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] naveensrinivasan commented on pull request #34165: [SPARK-36916][INFRA] Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
naveensrinivasan commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-1061014062
@HyukjinKwon Could this PR be revived? There are some critical fixes for certain dependencies.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
[GitHub] [spark] AmplabJenkins commented on pull request #34165: Enable Dependabot for improving security posture of the dependencies
Posted by GitBox <gi...@apache.org>.
AmplabJenkins commented on pull request #34165:
URL: https://github.com/apache/spark/pull/34165#issuecomment-932993895
Can one of the admins verify this patch?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org