Use BOM and dependabot

[rantoniuk]

No description provided.

[jglick]

Several mistakes.

[jglick]

Did you use mvn incrementals:incrementalify? You forgot to commit the .mvn/ directory if so.

[jglick]

Still missing .mvn/extensions.xml.

[rantoniuk]

Feel free to add that one file instead of commenting 2y old already merged PR ;-)
At the same time, might be just as well good to consider adding this file globally to all repositories under /jenkinsci org - I don't think it would harm them even if they're not using incrementals at the moment?

[jglick]

Feel free to add that one file

Already done in #85.

consider adding this file globally to all repositories

Could, but probably more confusing than helpful, since mvn incrementals:incrementalify expects to add it.

addressed, I think (use of force pushes makes it hard to tell what changed since last review)

[rantoniuk]

@jglick thanks for help on this. What's next?

Iis the <maintainers> pom field still used across plugins and up2date in this case? Looking at the merge history looking at the people who merged, it looks to me that there is a de-sync between maintainers and actual people that have repo merge rights.
After all, CI passed and there is an approval from you (so one of the people having merge rights) - wouldn't that work if in such case an auto-merge is done by the pipeline?

As a contributor, I'm just wondering if we can speed up the PR merging process somehow as it's not clear what happens here next.

[jglick]

POM maintainers can be ignored. Maybe @MRamonLeon is maintaining these days?

[rantoniuk]

@MRamonLeon any thoughts?

[rantoniuk]

@MRamonLeon, @jglick ping again 🙏

[MRamonLeon]

I don't see any reason to release these changes. Do you need it for any reason? Thank you for your contribution @warden

[rantoniuk]

@MRamonLeon thanks for acting on this. No, this one is not needed to be released, more important is #30.

[MRamonLeon]

I've commented on #30 @warden