Onboard renovate in jenkinsci organization (silent mode)

[Alexander Brandes]

Hey everyone,

I would like to propose to install renovate in silent mode in the jenkinsci organization.

Occasionally people ask us org admins to approve their installation request or have this in their hosting request right away.

Installing renovate on the org requires an opt-in still, given it runs in silent mode. That means no onboarding PR, no dependency update, and no issue is created unless the maintainer chooses to create a "renovate.json" proactively.

Existing installations are unaffected by that.

More information can be found in the renovate docs about the silent mode: https://docs.renovatebot.com/mend-hosted/hosted-apps-config/#onboarding-behavior 

This would reduce the maintenance effort on our side; yet I'm asking for feedback here first.

Best,

Alex

[Daniel Krämer]

+1 Renovate is already widely used from what I can tell and there are compelling reasons to use either dependabot, renovate or even both.

[Tim Jacomb]

+1

--
You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/jenkinsci-dev/703d5235-23fd-4a5e-a3a0-0b77169c235dn%40googlegroups.com.

[Hervé]

+1

To view this discussion visit https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3BiczTqFxKSEKw784Fpa1WOA4_j_zDHLsDRSxDWMnOJgH0A%40mail.gmail.com.

[Valentin Delaye (jonesbusy)]

+1 

But is it normal that I just received 2 on-boarding PR on 2 plugin that I maintains?

One example https://github.com/jenkinsci/asm-api-plugin/pull/106

[Alexander Brandes]

Interesting, according to the docs, no PRs should be created. Looking at the org dashboard, it runs in silent mode...

[Tim Jacomb]

I think silent mode doesn't quite do what we thought it did. I've tweaked the config, it shouldn't do any more.

--

You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-de...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/jenkinsci-dev/c90fa1b2-1b01-4438-9c7e-ba679935de6cn%40googlegroups.com.

[Ullrich Hafner]

I also get a lot of spam PRs for my projects that already use dependabot :-(

It seems to be not a silent installation ;-) 

[Jenkins Developers]

As per https://github.com/renovatebot/renovate/discussions/40116#discussioncomment-15319562 (and Tim already applied), it's an opt-in, yet opposed to the documentation, not leaving a single word about that :(