Details
-
Task
-
Resolution: Done
-
Neutral
-
None
-
None
-
None
-
None
-
-
Empty show more show less
-
Empty show more show less
Description
Before we used Renovate we used a homemade dependency bot (BUILD-688) which stored exceptions in a file at the root of boms (master & release/6.2 branches) called dependency-bot-excludes.properties.
With Renovate, that file is unhelpful. Renovate works with the JSON property ignoredDeps: https://docs.renovatebot.com/configuration-options/#ignoredeps
JSON doesn't support comments, though. We would lose the extra value we currently have in dependency-bot-excludes.properties if we used it. Therefore, we should roll back to XML comments. Those seem good enough for AWS: https://github.com/aws/aws-sdk-java-v2/blob/2.17.176/pom.xml#L105
That way we would see that information directly in the diff of PRs created by Renovate.
Once done
Once that is done, we could use ignoredDeps on top of that. It would help reduce the Bitbucket spam when we know for sure we are not bumping one dependency.