2025-02-05 Meeting notes

All public Working Group meetings follow the Recording Policy for Open edX Meetings

Date

Feb 5, 2025

Time	Item	Presenter	Notes

Time

Item

Presenter

Notes

@Adam Stankiewicz

Managing dependency upgrades:

Renovate vs. Dependabot
- Why do we have both running?
  - Quite possible we should only be using Renovate.
  - If so, should we turn off Dependabot?
  - @Brian Smith Wants to dig thru docs/ADRs, etc. to find where this decision is documented.
    - 9. Use Renovate to update dependencies — Open edX Proposals 1.0 documentation
Dependabot security vulnerabilities list no longer appears to be available in the Paragon repository.
- This changed likely due to recent Core Contributor changes, where @Adam Stankiewicz's permissions repo settings likely changed.
- @Adam Stankiewicz to follow-up with @Brian Smith wrt (at least) Paragon permissions.
Related issue:
- make sure dependabot knows how to handle the new branches · Issue #3365 · openedx/paragon