Repository navigation
Expand file tree
/
Copy pathdependabot.yml
More file actions
123 lines (120 loc) · 3.69 KB
/
Copy pathdependabot.yml
File metadata and controls
123 lines (120 loc) · 3.69 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
# Dependabot are scheduled to avoid contention with normal workday CI usage. We
# start running updates at 3AM UTC (7PM PST, 8AM IST) and stagger each
# subsequent update by 30m.
#
# JS updates are run weekly.
version: 2
updates:
- package-ecosystem: gomod
directory: "/"
schedule:
interval: daily
time: "03:00"
timezone: Etc/UTC
ignore:
# TODO(ver): Remove this once we update our Gateway API dependencies.
- dependency-name: sigs.k8s.io/gateway-api
update-types: [version-update:semver-major, version-update:semver-minor]
groups:
kube:
patterns:
- k8s.io/*
- package-ecosystem: cargo
directory: "/"
schedule:
interval: daily
time: "03:30"
timezone: Etc/UTC
allow:
- dependency-type: all
ignore:
# These dependencies are for platforms that we don't support:
- dependency-name: redox*
- dependency-name: js-sys
- dependency-name: wasm-bindgen
- dependency-name: web-sys
# These dependencies are updated via kubert, so only accept patch updates.
- dependency-name: clap
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: clap_*
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: kube
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: kube-*
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: k8s-openapi
update-types: [version-update:semver-major, version-update:semver-minor]
# These dependencies are updated via linkerd2-proxy-api, so only accept patch updates.
- dependency-name: prost
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: prost-*
update-types: [version-update:semver-major, version-update:semver-minor]
- dependency-name: tonic
update-types: [version-update:semver-major, version-update:semver-minor]
groups:
clap:
patterns:
- clap
- clap_*
update-types: [minor, patch]
futures:
patterns:
- futures
- futures-*
kube-patch:
patterns:
- k8s-openapi
- kube
- kube-*
- gateway-api
update-types: [patch]
kube:
patterns:
- kubert
- kubert-*
- k8s-openapi
- kube
- kube-*
- gateway-api
update-types: [major, minor]
grpc:
patterns:
- prost
- prost-*
- tonic
update-types: [patch]
tracing:
patterns:
- tracing
- tracing-*
serde:
patterns:
- serde
- serde_*
pest:
patterns:
- pest
- pest_*
- package-ecosystem: "github-actions"
directories:
- "/"
- ".github/actions/*"
schedule:
interval: "daily"
time: "04:00"
timezone: Etc/UTC
- package-ecosystem: "npm"
directory: "/web/app"
schedule:
# JS dependencies tend to be pretty noisy, so only check once per week.
interval: "weekly"
day: "sunday"
ignore:
# v6 is backwards-incompatible and requires lots of changes.
# A compatibility layer should come out at some point
# see https://reactrouter.com/docs/en/v6/upgrading/v5
- dependency-name: "react-router-dom"
update-types: ["version-update:semver-major"]
# bumps beyound our current version (v3) are breaking
- dependency-name: "@lingui/*"
update-types: ["version-update:semver-major"]