RepoMirrors
/
go-ceph
mirror of https://github.com/ceph/go-ceph
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
go-ceph/.github/dependabot.yml

13 lines
219 B
YAML
Raw Normal View History

github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
---
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
interval: "monthly"
github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
rebase-strategy: "disabled"
labels:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
- "no-API"
github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
commit-message:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
prefix: "go-ceph"