From 15dbf49932a5ab0a65d722c90f8e517bc1464017 Mon Sep 17 00:00:00 2001 From: Mark Waite Date: Sat, 24 Jan 2026 06:13:11 -0700 Subject: [PATCH] Use Renovate instead of Dependabot Dependabot has not detected plugin BOM releases for several weeks. It seems to also ignore plugin version numbers generated by automated releases. More details in the pull requests linked from: * https://github.com/jenkinsci/versioncolumn-plugin/pull/402 ### Testing to be done * After merging the pull request, I will find the plugin in the Renovate installed repositories (https://developer.mend.io/github/jenkinsci) and run "Actions" / "Run Renovate scan" for the plugin. That will create the Dependency Dashboard issue for the plugin * I will pin the Dependency Dashboard issue and click the checkbox to allow all pending pull requests to be created --- .github/dependabot.yml | 19 ------------------- .github/renovate.json | 6 ++++++ 2 files changed, 6 insertions(+), 19 deletions(-) delete mode 100644 .github/dependabot.yml create mode 100644 .github/renovate.json diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 73ad49d..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,19 +0,0 @@ -# Per https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates -version: 2 -updates: - - # Maintain dependencies for maven - - package-ecosystem: "maven" - directory: "/" - schedule: - interval: "weekly" - labels: - - "dependencies" - - # Maintain dependencies for GitHub actions - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "monthly" - labels: - - "skip-changelog" diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 0000000..e60d84f --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,6 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "github>jenkinsci/renovate-config" + ] +}