Skip to content

Add a simple dependabot config #377

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
k8s-ci-robot merged 2 commits into from
Apr 21, 2026
Merged

Add a simple dependabot config #377

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0c16aed
Add a simple dependabot config
npinaeva Apr 21, 2026
3778017
Update actions manually and hope the bot will help in the future
npinaeva Apr 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions .github/dependabot.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
labels:
- "area/dependency"
- "ok-to-test"

- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "weekly"
labels:
- "area/dependency"
- "ok-to-test"
6 changes: 3 additions & 3 deletions .github/workflows/conformance.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:
IP_FAMILY: ${{ matrix.ipFamily }}
steps:
- name: Check out code
uses: actions/checkout@v2
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
Copy link
Copy Markdown
Contributor

@tssurya tssurya Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what's with the hash? instead of doing "v5" directly?

Copy link
Copy Markdown
Member Author

@npinaeva npinaeva Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the failure is Error: The actions actions/checkout@v2 and actions/upload-artifact@v4 are not allowed in kubernetes-sigs/network-policy-api because all actions must be pinned to a full-length commit SHA.
so I both updated the versions and switched to using hashes

Copy link
Copy Markdown
Member

@rikatz rikatz Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is a new enforcement on the Kubernetes org now to use hashes on github actions

Copy link
Copy Markdown
Contributor

@tssurya tssurya Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah I see thanks @rikatz !


- name: Enable ipv4 and ipv6 forwarding
run: |
Expand Down Expand Up @@ -118,7 +118,7 @@ jobs:

- name: Upload Junit Reports
if: always()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
with:
name: kind-junit-${{ env.JOB_NAME }}-${{ github.run_id }}
path: './_artifacts/*.xml'
Expand All @@ -130,7 +130,7 @@ jobs:

- name: Upload logs
if: always()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
with:
name: kind-logs-${{ env.JOB_NAME }}-${{ github.run_id }}
path: ./_artifacts/logs
14 changes: 7 additions & 7 deletions .github/workflows/policy-assistant.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,10 +30,10 @@ jobs:
runs-on: ubuntu-22.04
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5

- name: Set up Go
uses: actions/setup-go@v5
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: ${{ env.GO_VERSION }}

Expand Down Expand Up @@ -66,10 +66,10 @@ jobs:
needs: go-tests
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5

- name: Set up Go
uses: actions/setup-go@v5
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: ${{ env.GO_VERSION }}

Expand All @@ -84,7 +84,7 @@ jobs:
cp cmd/policy-assistant/cmd/policy-assistant/policy-assistant artifacts/

- name: Upload policy-assistant Binary
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
with:
name: policy-assistant-binary
path: artifacts/policy-assistant
Expand All @@ -95,10 +95,10 @@ jobs:
needs: build
steps:
- name: Check out code
uses: actions/checkout@v4
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5

- name: Download policy-assistant Binary
uses: actions/download-artifact@v4
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: policy-assistant-binary
path: artifacts
Expand Down
4 changes: 2 additions & 2 deletions cmd/policy-assistant/.github/workflows/kind_antrea.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,9 @@ jobs:
name: Run policy-assistant on KinD/Antrea
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
- name: Set up Go
uses: actions/setup-go@v2
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: 1.18
- name: Run policy-assistant
Expand Down
4 changes: 2 additions & 2 deletions cmd/policy-assistant/.github/workflows/kind_calico.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,9 @@ jobs:
name: Run policy-assistant on KinD/Calico
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
- name: Set up Go
uses: actions/setup-go@v2
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: 1.18
- name: Run policy-assistant
Expand Down
4 changes: 2 additions & 2 deletions cmd/policy-assistant/.github/workflows/kind_cilium.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,9 @@ jobs:
name: Run policy-assistant on KinD/Cilium
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
- name: Set up Go
uses: actions/setup-go@v2
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: 1.18
- name: Run policy-assistant
Expand Down
2 changes: 1 addition & 1 deletion cmd/policy-assistant/.github/workflows/kind_cni_from_job.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
name: Run policy-assistant on KinD
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5

- name: Run policy-assistant
working-directory: hack/kind
Expand Down
4 changes: 2 additions & 2 deletions cmd/policy-assistant/.github/workflows/kind_cni_from_source.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,10 +15,10 @@ jobs:
name: Run policy-assistant on KinD
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5

- name: Set up Go
uses: actions/setup-go@v2
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: 1.18

Expand Down
4 changes: 2 additions & 2 deletions cmd/policy-assistant/.github/workflows/kind_ovn.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ jobs:
timeout-minutes: 250
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
- name: Set up Go
uses: actions/setup-go@v2
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
with:
go-version: 1.18
- name: Run policy-assistant
Expand Down
Loading