Thomas Broyer

@madhead There's #1164 already. It wouldn't tell Dependabot which file to _update_ though, for automatic pull requests.

@DanySK Dependabot powers GitHub's security alerts, it's not only about having automatic updates through pull requests.

@jurre As someone who would like alerts, and doesn't really care about automatic updates, is the code open source and could I contribute to it to add support for those...

…and single-file locks are becoming the default in Gradle 7. (that's actually 3 lockfiles possibly: settings-gradle.lockfile, buildscript-gradle.lockfile, and gradle.lockfile)

Fwiw, the problem with `AutoFixSuppressionComment` is not only Gradle, but also Maven (unless you're still using the `plexus-compiler-javac-errorprone`, which doesn't work with JDK10+ and has some classloading issues), Ant, or...

AFAICT, `AcknowledgeAndroidRecent` has not been added to the wiki.

I think 3 seconds for transpiling + many more seconds for Closure is too long for a usable "dev mode". Gradle does not have ijar/hjar but instead fingerprints the "incoming"...

> > I think 3 seconds for transpiling + many more seconds for Closure is too long for a usable "dev mode". > > 3 seconds is for change in...

> And thanks for looking into J2CL Gradle!! Far from being done, but code is now available at https://github.com/tbroyer/gradle-j2cl-plugin Write up about where I'm at: https://blog.ltgt.net/designing-gradle-j2cl-plugin/

> For starters; to cover output to source mapping, we could easily have a flag so that the generated source map can point to the original source. I think that's...