Skip to content

Commit 095acc8

Browse files
committed
chore(deps): update libp2p package ignore list for Dependabot
Refined the ignore list for old libp2p packages to prevent false-positive errors and ensure Dependabot only considers relevant dependencies.
1 parent 88870d9 commit 095acc8

File tree

1 file changed

+52
-18
lines changed

1 file changed

+52
-18
lines changed

.github/dependabot.yml

Lines changed: 52 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -40,15 +40,32 @@ updates:
4040
allow:
4141
- dependency-type: "direct"
4242
ignore:
43-
# Ignore old libp2p packages that have been consolidated into go-libp2p
44-
# These are transitive dependencies that cause false-positive Dependabot errors
45-
- dependency-name: "github.com/libp2p/go-libp2p-peerstore"
46-
- dependency-name: "github.com/libp2p/go-tcp-transport"
47-
- dependency-name: "github.com/libp2p/go-ws-transport"
48-
- dependency-name: "github.com/libp2p/go-conn-security-multistream"
49-
- dependency-name: "github.com/libp2p/go-libp2p-swarm"
50-
- dependency-name: "github.com/libp2p/go-libp2p-transport-upgrader"
51-
- dependency-name: "github.com/libp2p/go-libp2p-nat"
43+
# Prevent Dependabot from considering ancient +incompatible versions
44+
- dependency-name: "github.com/libp2p/go-libp2p"
45+
update-types: ["version-update:semver-major"]
46+
47+
# Ignore old libp2p standalone packages (wildcards to catch all variants)
48+
- dependency-name: "github.com/libp2p/go-libp2p-peerstore*"
49+
- dependency-name: "github.com/libp2p/go-tcp-transport*"
50+
- dependency-name: "github.com/libp2p/go-ws-transport*"
51+
- dependency-name: "github.com/libp2p/go-conn-security*"
52+
- dependency-name: "github.com/libp2p/go-libp2p-swarm*"
53+
- dependency-name: "github.com/libp2p/go-libp2p-transport*"
54+
- dependency-name: "github.com/libp2p/go-libp2p-nat*"
55+
- dependency-name: "github.com/libp2p/go-libp2p-host*"
56+
- dependency-name: "github.com/libp2p/go-libp2p-net*"
57+
- dependency-name: "github.com/libp2p/go-libp2p-protocol*"
58+
- dependency-name: "github.com/libp2p/go-libp2p-interface*"
59+
- dependency-name: "github.com/libp2p/go-libp2p-metrics*"
60+
- dependency-name: "github.com/libp2p/go-libp2p-loggables*"
61+
- dependency-name: "github.com/libp2p/go-libp2p-circuit*"
62+
- dependency-name: "github.com/libp2p/go-libp2p-crypto*"
63+
- dependency-name: "github.com/libp2p/go-libp2p-peer*"
64+
- dependency-name: "github.com/libp2p/go-libp2p-secio*"
65+
- dependency-name: "github.com/libp2p/go-stream-muxer*"
66+
- dependency-name: "github.com/libp2p/go-maddr-filter*"
67+
- dependency-name: "github.com/libp2p/go-mplex*"
68+
- dependency-name: "github.com/whyrusleeping/go-smux*"
5269
groups:
5370
security-deps:
5471
patterns:
@@ -79,15 +96,32 @@ updates:
7996
allow:
8097
- dependency-type: "direct"
8198
ignore:
82-
# Ignore old libp2p packages that have been consolidated into go-libp2p
83-
# These are transitive dependencies that cause false-positive Dependabot errors
84-
- dependency-name: "github.com/libp2p/go-libp2p-peerstore"
85-
- dependency-name: "github.com/libp2p/go-tcp-transport"
86-
- dependency-name: "github.com/libp2p/go-ws-transport"
87-
- dependency-name: "github.com/libp2p/go-conn-security-multistream"
88-
- dependency-name: "github.com/libp2p/go-libp2p-swarm"
89-
- dependency-name: "github.com/libp2p/go-libp2p-transport-upgrader"
90-
- dependency-name: "github.com/libp2p/go-libp2p-nat"
99+
# Prevent Dependabot from considering ancient +incompatible versions
100+
- dependency-name: "github.com/libp2p/go-libp2p"
101+
update-types: ["version-update:semver-major"]
102+
103+
# Ignore old libp2p standalone packages (wildcards to catch all variants)
104+
- dependency-name: "github.com/libp2p/go-libp2p-peerstore*"
105+
- dependency-name: "github.com/libp2p/go-tcp-transport*"
106+
- dependency-name: "github.com/libp2p/go-ws-transport*"
107+
- dependency-name: "github.com/libp2p/go-conn-security*"
108+
- dependency-name: "github.com/libp2p/go-libp2p-swarm*"
109+
- dependency-name: "github.com/libp2p/go-libp2p-transport*"
110+
- dependency-name: "github.com/libp2p/go-libp2p-nat*"
111+
- dependency-name: "github.com/libp2p/go-libp2p-host*"
112+
- dependency-name: "github.com/libp2p/go-libp2p-net*"
113+
- dependency-name: "github.com/libp2p/go-libp2p-protocol*"
114+
- dependency-name: "github.com/libp2p/go-libp2p-interface*"
115+
- dependency-name: "github.com/libp2p/go-libp2p-metrics*"
116+
- dependency-name: "github.com/libp2p/go-libp2p-loggables*"
117+
- dependency-name: "github.com/libp2p/go-libp2p-circuit*"
118+
- dependency-name: "github.com/libp2p/go-libp2p-crypto*"
119+
- dependency-name: "github.com/libp2p/go-libp2p-peer*"
120+
- dependency-name: "github.com/libp2p/go-libp2p-secio*"
121+
- dependency-name: "github.com/libp2p/go-stream-muxer*"
122+
- dependency-name: "github.com/libp2p/go-maddr-filter*"
123+
- dependency-name: "github.com/libp2p/go-mplex*"
124+
- dependency-name: "github.com/whyrusleeping/go-smux*"
91125
groups:
92126
security-deps:
93127
patterns:

0 commit comments

Comments
 (0)