From 1e5dfda07561d79ecb119c1772faf88b36986e4d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Robert=20Paj=C4=85k?= Date: Wed, 23 Nov 2022 11:04:00 +0100 Subject: [PATCH] docs: Bump vulnerable dependencies (#1648) --- docs/developing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/developing.md b/docs/developing.md index 6dd893eeb9..c38caf56c3 100644 --- a/docs/developing.md +++ b/docs/developing.md @@ -176,7 +176,7 @@ Other features are tested via `SmokeTests` class or have its own test class if a dedicated test application is needed. Currently, the strategy is to test the library instrumentations -against its lowest supported version. +against its lowest supported, but not vulnerable, version. The pull requests created by @dependabot with `do NOT merge` label are used to test against higher library versions when they are released.