From 08aa0bfe91d1491a8f2dc224d7feaae81426d946 Mon Sep 17 00:00:00 2001 From: Jonathan Yu Date: Sun, 30 Jan 2022 23:54:09 +0000 Subject: [PATCH 1/2] chore: add Dependabot configuration --- .github/dependabot.yml | 78 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 78 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000000..bdfcd1113e998 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,78 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + time: "06:00" + timezone: "America/Chicago" + commit-message: + prefix: "chore" + ignore: + # These actions deliver the latest versions by updating the major + # release tag, so ignore minor and patch versions + - dependency-name: "actions/*" + update-types: + - version-update:semver-minor + - version-update:semver-patch + - dependency-name: "Apple-Actions/import-codesign-certs" + update-types: + - version-update:semver-minor + - version-update:semver-patch + - dependency-name: "marocchino/sticky-pull-request-comment" + update-types: + - version-update:semver-minor + - version-update:semver-patch + + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "daily" + time: "06:00" + timezone: "America/Chicago" + commit-message: + prefix: "chore" + ignore: + # Ignore major and minor updates to Kubernetes packages, as we + # manage these versions manually according to our version policy: + # https://www.notion.so/coderhq/Kubernetes-version-support-strategy-82ecd5c9761e411e9dab61a7a1484418 + - dependency-name: k8s.io/api + update-types: + - version-update:semver-major + - version-update:semver-minor + - dependency-name: k8s.io/apimachinery + update-types: + - version-update:semver-major + - version-update:semver-minor + - dependency-name: k8s.io/client-go + update-types: + - version-update:semver-major + - version-update:semver-minor + - dependency-name: k8s.io/kubectl + update-types: + - version-update:semver-major + - version-update:semver-minor + - dependency-name: k8s.io/metrics + update-types: + - version-update:semver-major + - version-update:semver-minor + # AWS generates automated releases very frequently for the SDK, so + # ignore patch releases + - dependency-name: github.com/aws/aws-sdk-go + update-types: + - version-update:semver-patch + + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "daily" + time: "06:00" + timezone: "America/Chicago" + commit-message: + prefix: "chore" + ignore: + # Ignore major updates to Node.js types, because they need to + # correspond to the Node.js engine version + - dependency-name: "@types/node" + update-types: + - version-update:semver-major From c6adb6dc1dca8a47bdbc3c9e533301b9ec04cd82 Mon Sep 17 00:00:00 2001 From: Jonathan Yu Date: Mon, 31 Jan 2022 02:37:40 +0000 Subject: [PATCH 2/2] remove k8s and AWS deps --- .github/dependabot.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bdfcd1113e998..743b19d986bb4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -32,35 +32,6 @@ updates: timezone: "America/Chicago" commit-message: prefix: "chore" - ignore: - # Ignore major and minor updates to Kubernetes packages, as we - # manage these versions manually according to our version policy: - # https://www.notion.so/coderhq/Kubernetes-version-support-strategy-82ecd5c9761e411e9dab61a7a1484418 - - dependency-name: k8s.io/api - update-types: - - version-update:semver-major - - version-update:semver-minor - - dependency-name: k8s.io/apimachinery - update-types: - - version-update:semver-major - - version-update:semver-minor - - dependency-name: k8s.io/client-go - update-types: - - version-update:semver-major - - version-update:semver-minor - - dependency-name: k8s.io/kubectl - update-types: - - version-update:semver-major - - version-update:semver-minor - - dependency-name: k8s.io/metrics - update-types: - - version-update:semver-major - - version-update:semver-minor - # AWS generates automated releases very frequently for the SDK, so - # ignore patch releases - - dependency-name: github.com/aws/aws-sdk-go - update-types: - - version-update:semver-patch - package-ecosystem: "npm" directory: "/"