[CI] Replace check-dependabot hook with more robust option
Open
component:build
component:ci-cd
- Dominant language
- Java
- Stars
- 3.1k
- Forks
- 1.4k
- Avg merge
- 6d 19h
- Merged PRs (30d)
- 32
Description
Replace the live-fetch validator with python-jsonschema/check-jsonschema's check-dependabot hook, which ships the schema bundled with the package — fully offline, no network at runtime, no flakes:
I am closing the old PR since we found a better way to do this see the discussion below
https://github.com/apache/sedona/issues/2866
Replace check-dependabot hook with more robust option:
https://github.com/apache/sedona/pull/2987
refs https://github.com/apache/cloudstack/pull/12932
refs https://github.com/apache/shiro/blob/27bf09470eca422ebf05a165532282b26ef73dd4/.pre-commit-config.yaml#L219
Contributor guide
Assessment
This issue has not been assessed yet.