Uploaded image for project: 'Build'
  1. Build
  2. BUILD-739

Convert dependency-bot-excludes.properties back into something helpful

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Neutral
    • None
    • None
    • None
    • None

    Description

      Before we used Renovate we used a homemade dependency bot (BUILD-688) which stored exceptions in a file at the root of boms (master & release/6.2 branches) called dependency-bot-excludes.properties.

      With Renovate, that file is unhelpful. Renovate works with the JSON property ignoredDeps: https://docs.renovatebot.com/configuration-options/#ignoredeps

      JSON doesn't support comments, though. We would lose the extra value we currently have in dependency-bot-excludes.properties if we used it. Therefore, we should roll back to XML comments. Those seem good enough for AWS: https://github.com/aws/aws-sdk-java-v2/blob/2.17.176/pom.xml#L105

      That way we would see that information directly in the diff of PRs created by Renovate.

      Once done

      Once that is done, we could use ignoredDeps on top of that. It would help reduce the Bitbucket spam when we know for sure we are not bumping one dependency.

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              roberto.gomez Roberto Gomez
              mmichel Maxime Michel
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Checklists

                  Task DoR