Closed drpaneas closed 3 years ago
[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: drpaneas
To complete the pull request process, please assign jharrington22 after the PR has been reviewed.
You can assign the PR to them by writing /assign @jharrington22
in a comment when ready.
The full list of commands accepted by this bot can be found here.
Merging #594 (f6d5d81) into master (e72e3f9) will not change coverage. The diff coverage is
n/a
.
@@ Coverage Diff @@
## master #594 +/- ##
=======================================
Coverage 13.37% 13.37%
=======================================
Files 45 45
Lines 3850 3850
=======================================
Hits 515 515
Misses 3312 3312
Partials 23 23
Closed pending discussion on how to handle things like this in the future.
Whenever there is a new version of the 3rd party dependencies used by the project (namely whatever is inside go.mod and go.sum) then let the project update itself without developer's intervention.
Do the same for the APIs, as now, it's a separate isolated pkg.
The configuration makes sure this check runs on weekly basis.
Note: To make this work you need an admin for AAO to install https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/upgrading-from-dependabotcom-to-github-native-dependabot#upgrading-to-github-native-dependabot
REF: OSD-6207