Files
kured/.github/dependabot.yml
Jean-Philippe Evrard b4c8b64c2d Do not bump kubernetes with dependabot
Without this patch, we'll get kubernetes updates.

This is not necessary, and could be even a problem on merge:
those kubernetes updates are done separately, knowingly,
to respect the life cycle of the kubernetes we need
(and stay one version below latest to have a larger coverage
of versions).

We could keep dependabot to update those on a lower frequency,
but that sounds clunky and not great. Instead disable them all,
and rely on the team to do this regular maintenance work.
2020-11-30 12:03:50 +01:00

16 lines
387 B
YAML

version: 2
updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
# Maintain dependencies for gomod
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "daily"
ignore:
- dependency-name: "k8s.io/kubectl"
- dependency-name: "k8s.io/apimachinery"