Commit Graph

3 Commits

Author SHA1 Message Date
John Mulligan fc2e89fc34 github: enable dependabot for github-actions
Turns out the dependabot tool can also indicate what github actions we
are using can be updated. This can be handy in avoiding the warnings
that github throws up all over an action that relies on a deprecated
feature. Use a monthly update just like go modules to avoid being
pestered all the time.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-11-15 18:51:27 +00:00
John Mulligan 70765d6189 github: update dependabot configuration to better match go-ceph style
Lower the frequency of updates. The monthly update is documented to
occur on the first of the month, which works better with our
every-other-month release cadence.
Automatically apply the "no-API" label. Do not add a rebase label, which
has not relevance to the go-ceph workflow.
Use the prefix "go-ceph:" which is what we normally use for changes only
to the go.mode, etc.

Signed-off-by: John Mulligan <jmulligan@redhat.com>
2022-07-28 07:45:38 +00:00
Niels de Vos f33e35ef07 github: add Dependabot for managing versions in go.mod
Dependabot can automatically create PRs for packages that have have a
new release. By depending on recent versions of the consumed packages,
the result of the OpenSSF scorecard will improve.

See-also: https://deps.dev/go/github.com%2Fceph%2Fgo-ceph/
Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-04-26 14:02:55 +00:00