On main, Dependabot is configured to mark upgrades to automatically merge so long as the build passes.
However, situations like spring-projects/spring-boot#51032 and #19715 are an hint that auto-merging minor release updates can be risky and ultimately unneeded.
We should configure the auto-merge support to only do this for maintenance release updates.
On
main, Dependabot is configured to mark upgrades to automatically merge so long as the build passes.However, situations like spring-projects/spring-boot#51032 and #19715 are an hint that auto-merging minor release updates can be risky and ultimately unneeded.
We should configure the auto-merge support to only do this for maintenance release updates.