DependencyTrack / DependencyTrack/dependency-track
Auto-Upgrader - like Maven's "versions" plugin, but with extra run-a-build and do-a-commit steps
Open
enhancement
p2
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Technology shows what upgrades could be made to deps.
### Proposed Behavior:
Technology attempts to upgrade on dependency at a time, in cloud/CI time, then run a build, then propose a pull request if the the build is successful.
To break that down:
1. Dependency-track would attempt to upgrade in a cloned dir like Maven's versions plugin: https://www.mojohaus.org/versions-maven-plugin
2. Dependency-track would attempt to run a build and if successful to do a commit then make a pull-request
Contributor guide
Assessment
This issue has not been assessed yet.