[GitHub] [logging-log4j2] vy merged pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
vy merged pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please

[GitHub] [logging-log4j2] dependabot[bot] closed pull request #493: Bump tomcat-catalina from 8.5.20 to 10.0.6

2021-06-15 Thread GitBox
dependabot[bot] closed pull request #493: URL: https://github.com/apache/logging-log4j2/pull/493 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this se

[GitHub] [logging-log4j2] dependabot[bot] commented on pull request #493: Bump tomcat-catalina from 8.5.20 to 10.0.6

2021-06-15 Thread GitBox
dependabot[bot] commented on pull request #493: URL: https://github.com/apache/logging-log4j2/pull/493#issuecomment-862026582 Superseded by #517. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

[GitHub] [logging-log4j2] dependabot[bot] opened a new pull request #517: Bump tomcat-catalina from 8.5.20 to 10.0.7

2021-06-15 Thread GitBox
dependabot[bot] opened a new pull request #517: URL: https://github.com/apache/logging-log4j2/pull/517 Bumps tomcat-catalina from 8.5.20 to 10.0.7. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.tom

[GitHub] [logging-log4j2] rgoers commented on pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
rgoers commented on pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515#issuecomment-861835683 Ok. At least now I have an idea of what these are supposed to do. However, looking at the Dockerfile I see no versions of anything. If it is just checking the "uses" declara

[GitHub] [logging-log4j2] vy commented on pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
vy commented on pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515#issuecomment-861819840 I am in favor of this change due to: 1. `find . -name Dockerfile` acknowledges that we have `Dockerfile` usages in the code base. It is a good practice to make sure that the e

[GitHub] [logging-log4j2] rgoers edited a comment on pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
rgoers edited a comment on pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515#issuecomment-861608370 @garydgregory We use dependabot here as well, although it isn't nearly as useful as it is in Commons, especially since it doesn't update changes.xml. The issue here i

[GitHub] [logging-log4j2] rgoers commented on pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
rgoers commented on pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515#issuecomment-861608370 @garydgregory We use dependabot here as well, although it isn't nearly as useful as it is in Commons, especially since it doesn't update changes.xml. The issue here isn't de

[GitHub] [logging-log4j2] garydgregory commented on pull request #516: workflow: add action to handle stale PRs

2021-06-15 Thread GitBox
garydgregory commented on pull request #516: URL: https://github.com/apache/logging-log4j2/pull/516#issuecomment-861443297 I agree with Ralph, staleness is not interesting here. The work I put in here very much sporadic so the age of a PR rarely matters,.what matters more are conflicts.

[GitHub] [logging-log4j2] garydgregory commented on pull request #515: Update dependabot to track github action and dockerfile dependencies

2021-06-15 Thread GitBox
garydgregory commented on pull request #515: URL: https://github.com/apache/logging-log4j2/pull/515#issuecomment-861434403 We use Dependabot in Apache Commons, super useful IMO, you get a PR and GitHub build to go along with a dependency change which gives you more confidence that a de

[GitHub] [logging-log4j2] vy commented on pull request #516: workflow: add action to handle stale PRs

2021-06-15 Thread GitBox
vy commented on pull request #516: URL: https://github.com/apache/logging-log4j2/pull/516#issuecomment-861282409 Thanks so much for letting us know of this feature, much appreciated @chenrui333! Please don't get demotivated by the questions from the rest of us. This is a part of the deal w

[GitHub] [logging-log4j2] vy closed pull request #516: workflow: add action to handle stale PRs

2021-06-15 Thread GitBox
vy closed pull request #516: URL: https://github.com/apache/logging-log4j2/pull/516 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please