Commit Graph

3 Commits

Author SHA1 Message Date
Jean-Philippe Evrard
996b1459b1 Do not bump any k8s module
Without this patch, dependabot will still try to bump some k8s
dependencies.

This is a problem, as we need to bump them together, manually.

This should fix it by removing them all from dependabot.
2020-12-14 10:25:52 +01:00
Jean-Philippe Evrard
b4c8b64c2d Do not bump kubernetes with dependabot
Without this patch, we'll get kubernetes updates.

This is not necessary, and could be even a problem on merge:
those kubernetes updates are done separately, knowingly,
to respect the life cycle of the kubernetes we need
(and stay one version below latest to have a larger coverage
of versions).

We could keep dependabot to update those on a lower frequency,
but that sounds clunky and not great. Instead disable them all,
and rely on the team to do this regular maintenance work.
2020-11-30 12:03:50 +01:00
Jean-Philippe Evrard
1cab9a1d28 Add dependabot
Without this patch, our deps will have to be manually maintained.

This should fix it.
2020-08-31 15:58:21 +02:00