Skip to content

Commit a72bcb2

Browse files
authored
chore: add dependabot to automate dependency updates (#178)
Adds dependabot configuration to keep dependencies current. Current controller-runtime (v0.17.2) and k8s.io dependencies (v0.29.x) are behind upstream releases (controller-runtime v0.22.4, Kubernetes v1.34.1). Dependabot will create daily PRs for Go modules and GitHub Actions, and weekly PRs for Docker base images. Kubernetes dependencies are grouped to reduce PR noise. Example of PRs created by dependabot in operator-framework repositories: [PRs](https://github.com/operator-framework/operator-controller/pulls?q=dependabot+assignee%3Aanik120) See [dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot) for more info. Signed-off-by: Anik Bhattacharjee <anbhatta@redhat.com> Approved-by: VaishnaviHire Approved-by: nathan-weinberg
1 parent 0b716f2 commit a72bcb2

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

.github/dependabot.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "daily"
7+
commit-message:
8+
prefix: "chore"
9+
10+
- package-ecosystem: "gomod"
11+
directory: "/"
12+
schedule:
13+
interval: "daily"
14+
commit-message:
15+
prefix: "chore"
16+
17+
groups:
18+
k8s-dependencies:
19+
patterns:
20+
- "k8s.io/*"
21+
- "sigs.k8s.io/*"
22+
23+
- package-ecosystem: "docker"
24+
directory: "/"
25+
schedule:
26+
interval: "weekly"
27+
commit-message:
28+
prefix: "chore"

0 commit comments

Comments
 (0)