Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Dependabot config to monitor both branches #172

Merged
merged 1 commit into from
Jul 23, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
103 changes: 86 additions & 17 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,39 +7,50 @@

# https://help.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates

######################################################################
# Monitor Go module dependency updates
######################################################################

version: 2
updates:
# Enable version updates for Go modules
- package-ecosystem: "gomod"

# Look for a `go.mod` file in the `root` directory
directory: "/"

# Default is a maximum of five pull requests for version updates
open-pull-requests-limit: 10

target-branch: "master"

# Daily update checks; default version checks are performed at 05:00 UTC
schedule:
interval: "daily"
time: "02:00"
timezone: "America/Chicago"

# Assign everything to me by default
assignees:
- "atc0005"
labels:
- "dependencies"

allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
commit-message:
prefix: "go.mod"

- package-ecosystem: "gomod"
directory: "/"
open-pull-requests-limit: 10
target-branch: "development"
schedule:
interval: "daily"
time: "02:00"
timezone: "America/Chicago"
assignees:
- "atc0005"
labels:
- "dependencies"
allow:
- dependency-type: "all"
commit-message:
# Prefix all commit messages with "go.mod"
prefix: "go.mod"

######################################################################
# Monitor GitHub Actions dependency updates
######################################################################

- package-ecosystem: "github-actions"
directory: "/"
open-pull-requests-limit: 10
Expand All @@ -58,7 +69,28 @@ updates:
commit-message:
prefix: "ghaw"

# Monitor Go updates to serve as a reminder to generate fresh binaries
- package-ecosystem: "github-actions"
directory: "/"
open-pull-requests-limit: 10
target-branch: "development"
schedule:
interval: "daily"
time: "02:00"
timezone: "America/Chicago"
assignees:
- "atc0005"
labels:
- "dependencies"
- "CI"
allow:
- dependency-type: "all"
commit-message:
prefix: "ghaw"

######################################################################
# Monitor Go updates to service as a reminder to generate new releases
######################################################################

- package-ecosystem: docker
directory: "/dependabot/docker/go"
open-pull-requests-limit: 10
Expand All @@ -79,12 +111,31 @@ updates:
ignore:
- dependency-name: "golang"
versions:
# Ignore updates from series associated with the latest "stable"
# Go release and no longer supported Go versions.
- ">= 1.20"
- "< 1.19"

# Monitor image used to build dev & stable project releases
- package-ecosystem: docker
directory: "/dependabot/docker/go"
open-pull-requests-limit: 10
target-branch: "development"
schedule:
interval: "daily"
time: "02:00"
timezone: "America/Chicago"
assignees:
- "atc0005"
labels:
- "dependencies"
- "CI"
allow:
- dependency-type: "all"
commit-message:
prefix: "canary"

######################################################################
# Monitor images used to build project releases
######################################################################

- package-ecosystem: docker
directory: "/dependabot/docker/builds"
open-pull-requests-limit: 10
Expand All @@ -102,3 +153,21 @@ updates:
- dependency-type: "all"
commit-message:
prefix: "docker"

- package-ecosystem: docker
directory: "/dependabot/docker/builds"
open-pull-requests-limit: 10
target-branch: "development"
schedule:
interval: "daily"
time: "02:00"
timezone: "America/Chicago"
assignees:
- "atc0005"
labels:
- "dependencies"
- "builds"
allow:
- dependency-type: "all"
commit-message:
prefix: "docker"