search

open-telemetry / opentelemetry-python

OpenTelemetry Python API and SDK
https://opentelemetry.io
Apache License 2.0
1.83k stars 641 forks source link

Many security issues are being reported against test/development requirements files #3873

Open ocelotl opened 7 months ago

ocelotl commented 7 months ago

After fixing our dependency versions we now get lots of security warnings, fix that.

xrmx commented 7 months ago

Do you know if adding a new entry for each subproject root directory in dependabot.yml will work?

tammy-baylis-swi commented 7 months ago

Is there also a way to group by dependency-type? Or are all .txt files treated the same by dependabot?

xrmx commented 7 months ago

Is there also a way to group by dependency-type? Or are all .txt files treated the same by dependabot?

According to this comment dependency-type can't be used https://stackoverflow.com/a/76133576