Re: Improving Dependabot Automation Under New Workflow Requirements

Volkan Yazıcı <[email protected]>
Newsgroups gmane.comp.jakarta.log4j.devel
Message-ID <CABDM8gA21thGVDSdpu7P0t_eV+_EYfY6CPKoVrT=WcoGXYvG9Q__22339.9221127451$1761941231$gmane$org@mail.gmail.com>
[I am AFK.] Auto-generation of changelog entries is very important for me.
It was already crucial for single dependency updates, it became even more
with grouped ones. I prefer the simplest setup; no PAT, etc. — if possible.
I can click on the approve + auto-squash button once a week/month.

I will make this issue my priority next week. Let’s finalize this work.

Op vr 31 okt 2025 om 15:43 schreef Piotr P. Karwasz <
[email protected]>

> Hi Volkan,
>
> On 31.10.2025 13:26, Volkan Yazıcı wrote:
> > Op vr 31 okt 2025 om 12:44 schreef Piotr P. Karwasz <
> > [email protected]>
> >
> >> Enable a single grouped Dependabot PR per month for all dependencies.
> >
> >
> > Will this PR include auto-generated changelog entries?
>
> Now that you say it, probably yes. The current official
> `dependabot/fetch-metadata` is able to detect the *new* version of a
> dependency. Its the *previous* version that causes problems. I'll have
> to double-check that: the PR is quite old. ;-)
>
> Piotr
>
>
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.