DependencyTrack / DependencyTrack/dependency-track

Auto-Upgrader - like Maven's "versions" plugin, but with extra run-a-build and do-a-commit steps

Open
#1,272 2 comments 0 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior:

Technology shows what upgrades could be made to deps.

### Proposed Behavior:

Technology attempts to upgrade on dependency at a time, in cloud/CI time, then run a build, then propose a pull request if the the build is successful.

To break that down:

1. Dependency-track would attempt to upgrade in a cloned dir like Maven's versions plugin: https://www.mojohaus.org/versions-maven-plugin

2. Dependency-track would attempt to run a build and if successful to do a commit then make a pull-request

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.