Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [tractusx-dev] New Dependabot Tractus-X Release Guideline
  • From: Felipe Zampa <felipe.zampa@xxxxxxxxxxxxxx>
  • Date: Tue, 16 Jan 2024 15:44:47 +0000
  • Accept-language: en-US, en-GB
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cofinity-x.com; dmarc=pass action=none header.from=cofinity-x.com; dkim=pass header.d=cofinity-x.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=H4QPYg+EBmL05IOBYwS87OmN//kGzaJCysOkAmQHnk4=; b=hOed0R1kJu5kdkVPQGPK5e5M5lyGebJJoH5QQMW1HWflySp1WvgZaMEMchKUsZ3V2aLNVsTqjzV4VOVAMp0vHDx1LPtYGyEqPb34GWuo43WhRSYdtEYRn79pME9i6eleGZeIfmirscbZ1Rwd3zZUcNePlJRMY5UlLUWMVLbmOZLnEt9Rl8M1BtTh7Eo5mH8wepJEo3FbCcrff1i3jo8K+WgANssTPg2/B4qZQVPU07flJo54FWrxS83Jh8AwdP8Axn+q7r11JBhMPGKtaIx6JWnp4hkCccaJ2T7fjkdmi1gKuS+7jOS6LIg2dr0bTAvwtryIggUCIrlkSuuxV8miiA==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lGAW5OOZ5u0GCWh6jcrJ4ZpfXufvcr35SoOf0GjRYsNHyRUYf4DAgMmlebCncPpm83NwPSCzKPQZn3ifChYygbsQqOSD0xrxdRznkjLMOvhw88WTns2oIAVSyqNKBI/cKk0SyYj8woKpKZpzvr3tZVjmPSaEvibVr2F6oV3maWKe6CM4fS8LeiLQCwnJjHlI243XKkzCoIo60Mwjq29/ZgwVX/n02vbJ5srNy1HHOkQmXv0iXc2yvJ/TjlErRqKoq/iOdAtBmdrlfRjqD1TqIxeqlLHOL+65sGoCzTg/NpAGYEoRkgWZZhCjde6Xs2brAksS8vPmw63W4khdaEhp2w==
  • Delivered-to: tractusx-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/tractusx-dev/>
  • List-help: <mailto:tractusx-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/tractusx-dev>, <mailto:tractusx-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/tractusx-dev>, <mailto:tractusx-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHaSG4X/WjmAhd+RE6ebIgeuOn6B7DcknbY
  • Thread-topic: New Dependabot Tractus-X Release Guideline

Hello everyone,

 

Please apologize the reaction being sent as a reply-all to the list.

 

Together with that positive feedback, I want to thank you Tomasz for the Dependabot TRG and ask if there is any plan on how to move forward with some specific dependency update in case it breaks the build.

 

In the past, on a small team, I had a good experience closing those Dependabot PRs and opening a ticket to investigate and fix that specific update.

 

Also, it can be helpful to have documented for each project the list of “non-updatable dependencies”, as they might incur breaking changes, re-work, or any other consequence that blocks a library to be updated to a specific version.

 

Any thoughts about that?

 

Thank you.

 

Felipe Zampa Fonseca
Application Architect Core Services 
Cofinity-X GmbH │c/o Im Mediapark 5 │50670 Köln
E :  felipe.zampa@xxxxxxxxxxxxxx
M : +49 176 15344601

Booking   | LinkedIn  
 
Signature-Logo.png
 

Mandatory Disclosure Statement: www.cofinity-x.com/impressum
This e-mail may contain trade secrets or privileged, undisclosed, or otherwise confidential information. If you have received this e-mail in error, you are hereby notified, that any review, copying, or distribution of it is strictly prohibited. Please inform us immediately and destroy the original transmittal. Thank you for your cooperation. 

 

 

From: tractusx-dev <tractusx-dev-bounces@xxxxxxxxxxx> on behalf of Tomasz.Barwicki--- via tractusx-dev <tractusx-dev@xxxxxxxxxxx>
Date: Tuesday, January 16, 2024 at 12:27
To: tractusx-dev@xxxxxxxxxxx <tractusx-dev@xxxxxxxxxxx>
Cc: Tomasz.Barwicki@xxxxxxxxxxxxx <Tomasz.Barwicki@xxxxxxxxxxxxx>
Subject: [tractusx-dev] New Dependabot Tractus-X Release Guideline

Dear Tractus-X Community,

I hope this email finds you well. I’m excited to share an update regarding new GitHub Dependabot Tractus-X Release Guideline.
The aim of the TRG is to help us automatically track and manage dependencies, ensuring that our projects remain secure and up to date.

 

The document is currently available in draft form and is ready for your review.
You can access the document here.

Encourage you to review the document at your earliest convenience. Feel free to share any comments, suggestions, or questions you may have directly on the document or by replying to this email.

Thank you for your continued support and collaboration.

Best regards,

Tomasz Barwicki

 

Back to the top