Hi Volkan, On Sun, 5 Feb 2023 at 21:02, Volkan Yazıcı <vol...@yazi.ci> wrote: > Let me also state that I don't have this problem in projects where > dependabot PRs are merged automatically, e.g., `log4j-tools`. PR comes in, > `verify` succeeds, PR gets merged, and I see this beautiful interaction in > my inbox. This simply puts a smile on my face, or when `verify` fails, a > frowning look to check what went wrong.
Yes, that is a very nice configuration you have in `log4j-tools`. I am testing it in my `logging-log4j2` fork to see if all exclusions are right: there are many dependencies that we don't want to bump to the latest version. Piotr
