From 1a2666f7833f8fe5fcbf813d04de0422ff39fb11 Mon Sep 17 00:00:00 2001 From: Kenny Leung Date: Fri, 21 Jun 2024 00:00:44 -0700 Subject: [PATCH] setup dependabot for clog (#18) Signed-off-by: Kenny Leung --- .github/dependabot.yml | 20 ++++++++++++++++++++ .github/workflows/go.yml | 4 ++-- go.mod | 2 +- 3 files changed, 23 insertions(+), 3 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..04dd9e4 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +# Copyright 2024 Chainguard, Inc. +# SPDX-License-Identifier: Apache-2.0 + +version: 2 +updates: +- package-ecosystem: gomod + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + groups: + all: + update-types: + - "minor" + - "patch" +- package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 4927f09..5389411 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -17,9 +17,9 @@ jobs: - uses: actions/checkout@v3 - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 with: - go-version: '1.21' + go-version-file: './go.mod' - name: Build run: go build -v ./... diff --git a/go.mod b/go.mod index 22b823f..8898fa9 100644 --- a/go.mod +++ b/go.mod @@ -1,3 +1,3 @@ module github.com/chainguard-dev/clog -go 1.21.2 +go 1.22.4