search

gbif / ipt

GBIF Integrated Publishing Toolkit (IPT)
https://www.gbif.org/ipt
Apache License 2.0
128 stars 58 forks source link

Dependency Dashboard #2136

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

Detected dependencies

github-actions
.github/workflows/renovate-jenkins-trigger.yml
maven
pom.xml - `org.gbif:motherpom 56` - `org.eclipse.jetty:jetty-maven-plugin 9.4.56.v20240826` - `org.codehaus.mojo:buildnumber-maven-plugin 1.4` - `org.codehaus.mojo:native2ascii-maven-plugin 2.1.1` - `org.gbif:dwca-io 2.16` - `org.gbif:gbif-metadata-profile-eml 2.6` - `org.gbif:dwc-api 1.49` - `org.gbif:gbif-common 0.60` - `org.gbif:gbif-httputils 1.4` - `org.gbif:gbif-api 1.16.18` - `org.gbif:gbif-parsers 0.67` - `org.gbif:gbif-doi 2.21` - `org.apache.logging.log4j:log4j-slf4j-impl 2.24.2` - `org.apache.struts:struts2-core 2.5.33` - `org.apache.struts:struts2-json-plugin 2.5.33` - `javassist:javassist 3.12.1.GA` - `org.freemarker:freemarker 2.3.33` - `com.google.inject:guice 4.2.3` - `com.google.inject.extensions:guice-struts2 4.2.3` - `com.google.inject.extensions:guice-assistedinject 4.2.3` - `com.google.inject.extensions:guice-servlet 4.2.3` - `com.google.guava:guava 20.0` - `javax.mail:mail 1.4.7` - `javax.servlet:javax.servlet-api 3.0.1` - `mysql:mysql-connector-java 8.0.33` - `org.postgresql:postgresql 42.7.4` - `net.sourceforge.jtds:jtds 1.3.1` - `com.microsoft.sqlserver:mssql-jdbc 12.8.1.jre8` - `com.oracle.database.jdbc:ojdbc8 23.6.0.24.10` - `io.frictionlessdata:datapackage-java 0.6.16.1-gbif` - `org.apache.poi:poi 5.3.0` - `org.apache.poi:poi-ooxml 5.3.0` - `com.github.pjfanning:excel-streaming-reader 4.4.0` - `org.apache.logging.log4j:log4j-core 2.24.2` - `org.apache.commons:commons-lang3 3.17.0` - `commons-validator:commons-validator 1.9.0` - `org.apache.commons:commons-collections4 4.4` - `org.apache.commons:commons-text 1.12.0` - `org.apache.httpcomponents:httpclient 4.5.14` - `org.apache.httpcomponents:httpcore 4.4.16` - `javax.validation:validation-api 2.0.1.Final` - `org.hibernate.validator:hibernate-validator 6.2.5.Final` - `javax.el:javax.el-api 3.0.0` - `org.glassfish:jakarta.el 3.0.4` - `commons-digester:commons-digester 2.1` - `com.thoughtworks.xstream:xstream 1.4.21` - `commons-io:commons-io 2.18.0` - `com.github.librepdf:openrtf 1.2.1` - `com.sun.jersey:jersey-core 1.19.4` - `com.sun.jersey:jersey-client 1.19.4` - `com.google.code.gson:gson 2.11.0` - `com.google.code.findbugs:jsr305 3.0.2` - `com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer 20220608.1` - `javax.xml.bind:jaxb-api 2.3.1` - `org.glassfish.jaxb:jaxb-runtime 2.3.9` - `at.favre.lib:bcrypt 0.10.2` - `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.14.0` - `com.graphhopper.external:jackson-datatype-jts 2.14` - `org.junit.jupiter:junit-jupiter-engine 5.11.3` - `org.junit.jupiter:junit-jupiter-params 5.11.3` - `org.mockito:mockito-junit-jupiter 4.11.0` - `org.mockito:mockito-core 4.11.0` - `org.apache.maven.plugins:maven-war-plugin 3.4.0` - `org.apache.maven.plugins:maven-war-plugin 3.4.0`
peterdesmet commented 1 year ago

@mike-podolskiy90, renovate has caused a lot of notifications for watchers of this repo. This could potentially drown out the useful notifications 😄. Do you know of a way to silence/ignore all notifications from renovate on GitHub? If not, I'll try to setup a Gmail filter.

mike-podolskiy90 commented 1 year ago

That can be an issue indeed.

I changed prHourlyLimit to decrease number of PRs created, but notifications will still be there. I don't expect lots of them once it's finished though. Do you also get a notification every time this issue updates?

I guess it can be switched to branch mode in which it won't be creating PRs and just merge branches silently instead. Unfortunately, there are no flexible rules in GitHub to filter notifications

abubelinha commented 1 year ago

I didn't dare to open an issue myself because nobody else was complaining.

But I totally agree @peterdesmet : this is so annoying I was thinking about unsuscribing ipt repository notifications. (please tell us if you can design an effective gmail filter: I looked a bit yesterday but wasn't able yet).

Do you also get a notification every time this issue updates?

@mike-podolskiy90 I don't know because I deleted them all as I didn't understood what it was about. Here you are a couple of those messages, with a 3 hours gap between them, both related to the same subject so probably they are updates of the same issue. Dozens of these arriving frequently during the last day:

[gbif/ipt] Update dependency commons-io:commons-io to v2.15.0 (PR #2146)

renovate[bot] notifications@github.com 02:45 (7 hours ago) to gbif/ipt, Push

@renovate[bot] pushed 1 commit.

1b29946 Update dependency commons-io:commons-io to v2.15.0 — View it on GitHub or unsubscribe. You are receiving this because you are subscribed to this thread.

renovate[bot] notifications@github.com 05:37 (4 hours ago) to gbif/ipt, Push

@renovate[bot] pushed 1 commit.

b67df54 Update dependency commons-io:commons-io to v2.15.0 — View it on GitHub or unsubscribe. You are receiving this because you are subscribed to this thread.

peterdesmet commented 1 year ago

@mike-podolskiy90 I don't get notifications when the first comment of this issue is updated, but I did get notifications for the 16 pull requests. I expect to get more notifications for those PRs for every commit or comment. It is possible to mute notifications on those PRs, but you have to do it per PR, which doesn't prevent getting notifications for new ones.

I don't expect lots of them once it's finished though.

Good, I'll refrain from creating a filter then.

@abubelinha I think the following filter should work:

Screenshot 2023-10-27 at 10 30 54
mike-podolskiy90 commented 1 year ago

I'll switch Renovate to use autoMergeType: branch mode. This configuration will eliminate PRs, but just need to test it works as expected

mike-podolskiy90 commented 1 year ago

@abubelinha @peterdesmet I can also recommend to switch off pull request notifications in GitHub. At the project page: Watch/Unwatch -> Custom -> (Check what activity you'd like to see, I'd recommend "issues", "discussions" and "releases" only)

abubelinha commented 1 year ago

Thank you @peterdesmet / @mike-podolskiy90 👍 I applied both gmail / github settings and now my phone is quite more quiet.