From ce27d24677b66f42527ff2fb9889eb45305e2fa0 Mon Sep 17 00:00:00 2001 From: Stefan Bueringer Date: Mon, 28 Nov 2022 13:22:02 +0700 Subject: [PATCH] Automate go dependency bumps (except CR/k8s.io) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Stefan Büringer buringerst@vmware.com --- .github/dependabot.yml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 358522af948a..83e155480f2c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,8 @@ +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates version: 2 updates: +# GitHub Actions - package-ecosystem: "github-actions" directory: "/" schedule: @@ -8,13 +11,20 @@ updates: prefix: ":seedling:" labels: - "ok-to-test" +# Go - package-ecosystem: "gomod" directory: "/" schedule: interval: "weekly" - allow: - - dependency-name: "github.com/coredns/corefile-migration" + ignore: + # Ignore controller-runtime as its upgraded manually. + - dependency-name: "sigs.k8s.io/controller-runtime" + # Ignore k8s and its transitives modules as they are upgraded manually + # together with controller-runtime. + - dependency-name: "k8s.io/*" + - dependency-name: "go.etcd.io/*" + - dependency-name: "google.golang.org/grpc" commit-message: prefix: ":seedling:" labels: - - "ok-to-test" \ No newline at end of file + - "ok-to-test"