Jon Janego

icon company @github icon location Chicago, IL icon location Product manager at @github, formerly at @aws and @veracode. Helping the world build more secure software, through the power of applied graph theory!

Results 36 comments of Jon Janego

Add outputs for the changes data

Thank you for the contributions @laughedelic . We'll take a look at it sometime in the next couple of weeks and let you know any questions that we may have!

Add outputs for the changes data

Thank you again for the contribution, @laughedelic !

Packages being flagged incorrectly with invalid SPDX license definitions

Please start with using a current release. The latest is [4.3.4](https://github.com/actions/dependency-review-action/releases/tag/v4.3.4) and you are using v3 which was last updated in January. We have made some [recent improvements](https://github.com/actions/dependency-review-action/pull/719) to license...

Support uv compiled requirements files

Hi all, I'm one of the product managers at GitHub responsible for Dependabot. First off, thank you all for the great collaboration and discussion in here, and especially from @avilaton...

Support uv compiled requirements files

Hi everyone. Thanks for clarifying the intentions here and continuing to collaborate! When this PR gets into a state that you think is close to merge-able, please tag me and...

Support uv compiled requirements files

Hi @beagold, @avilaton and other contributors. How is progress going on these changes?