ci: add dependabot config to update Go and GitHub Actions dependencies

Signed-off-by: Robin Hahling <[email protected]>
cilium · Aug 17, 2022 · 089b0ad · 089b0ad
1 parent 8e27769
commit 089b0ad
Showing 1 changed file with 59 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,59 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "vendor/main:"
+    open-pull-requests-limit: 1
+    rebase-strategy: disabled
+    labels:
+    - module/main
+    - ci/dependabot
+    - enhancement
+  - package-ecosystem: gomod
+    directory: /cmd
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "vendor/cmd:"
+    open-pull-requests-limit: 1
+    rebase-strategy: disabled
+    ignore:
+        # updated manually due to replace directives
+      - dependency-name: "github.com/cilium/cilium"
+        # updated manually when releasing
+      - dependency-name: "github.com/cilium/fake"
+    labels:
+    - module/cmd
+    - ci/dependabot
+    - enhancement
+  - package-ecosystem: gomod
+    directory: /flow
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "vendor/flow:"
+    open-pull-requests-limit: 1
+    rebase-strategy: disabled
+    ignore:
+        # updated manually due to replace directives
+      - dependency-name: "github.com/cilium/cilium"
+        # updated manually when releasing
+      - dependency-name: "github.com/cilium/fake"
+    labels:
+    - module/flow
+    - ci/dependabot
+    - enhancement
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "ci:"
+    open-pull-requests-limit: 5
+    rebase-strategy: disabled
+    labels:
+    - ci/dependabot
+    - enhancement