Wade Barnes
@ff137, Thanks for the feedback. Good discussion points for the ACA-PUG meeting next week. BTW, the `dependency` and `ecosystem` (language name) labels come for free, no need to define them.
Comments during [ACA-PUG meeting](https://wiki.hyperledger.org/display/ARIES/2024-05-14+Aries+Cloud+Agent+-+Python+Users+Group+Community+Meeting): - Ignore patch releases, to reduce noise. - @dbluhm, `dev` dependencies should be updated as well, to ensure they keep up with the rest of the...
The current configuration does not group dependency updates together, therefore Dependabot will open a separate PR for each update it identifies. Based on experience with other repositories the initial volume...
@ff137, We tested the YAML anchors/aliases and confirmed they are not supported by Dependabot. [This](https://github.com/rajpalc7/aries-mediator-service/blob/a64f060f1dd38491ea09c0dae8460b5e8dd204b1/.github/dependabot.yml#L1-L20) file, though valid YAML, produced the following error message in Dependabot. 
> Not sure why Snyk Container is failing. @WadeBarnes I notice #2951 was recently merged to fix it, but for some reason that PR didn't have the Snyk Container job...
> > Not sure why Snyk Container is failing. @WadeBarnes I notice #2951 was recently merged to fix it, but for some reason that PR didn't have the Snyk Container...
> @WadeBarnes aah that can be tricky... Thanks! Will rebase once that's in The update to the Snyk Container job has been merged.
The biggest concern with self hosting runners is [security](https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#self-hosted-runner-security), not to say it can't be done, it would just take some time to design a secure environemnt based on the...
Very good point. I meant to mention that we need to protect privacy.
Looks good to me. We may want to incorporate some of the feedback discussed [here](https://github.com/hyperledger/aries-cloudagent-python/pull/2945) but that can always be done as a follow-up.