RepoMirrors/go-ceph
1
0
Fork 0
mirror of https://github.com/ceph/go-ceph synced 2025-01-22 22:23:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
dada7a32b3
go-ceph/.github/dependabot.yml

22 lines
421 B
YAML
Raw Normal View History

github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
---
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
interval: "monthly"
github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
rebase-strategy: "disabled"
labels:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
- "no-API"
github: add Dependabot for managing versions in go.mod Dependabot can automatically create PRs for packages that have have a new release. By depending on recent versions of the consumed packages, the result of the OpenSSF scorecard will improve. See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/ Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-12 09:39:04 +00:00
commit-message:
github: update dependabot configuration to better match go-ceph style Lower the frequency of updates. The monthly update is documented to occur on the first of the month, which works better with our every-other-month release cadence. Automatically apply the "no-API" label. Do not add a rebase label, which has not relevance to the go-ceph workflow. Use the prefix "go-ceph:" which is what we normally use for changes only to the go.mode, etc. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-26 13:26:30 +00:00
prefix: "go-ceph"
github: enable dependabot for github-actions Turns out the dependabot tool can also indicate what github actions we are using can be updated. This can be handy in avoiding the warnings that github throws up all over an action that relies on a deprecated feature. Use a monthly update just like go modules to avoid being pestered all the time. Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-11-14 20:50:26 +00:00
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
rebase-strategy: disabled
labels:
- "no-API"
commit-message:
prefix: "go-ceph"
Reference in New Issue Copy Permalink