chore: add dependabot for active release branches#325
Conversation
tekton-robot
added
the
size/XL
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Add dependabot configuration for all active release branches (release-v0.3.x, release-v0.4.x), following the same pattern as tektoncd/pipeline. - .github/dependabot.config.yml: human-editable source of truth listing active release branches and ecosystems (gomod, github-actions, docker) - .github/dependabot.yml: generated file with 9 update entries (main + 2 release branches × 3 ecosystems); release branches are restricted to patch-only updates - hack/generate-dependabot.go: Go generator that produces dependabot.yml from the config file - hack/generate-dependabot.sh: shell wrapper to run the generator - .github/workflows/dependabot-regen.yml: weekly workflow that regenerates dependabot.yml and opens a PR when changes are detected - releases.md: add v0.4 (LTS) and mark v0.3 as (LTS) for branch extraction Signed-off-by: Abdeljaouad Khelil <akhelil@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
jkhelil
force-pushed
the
update_dependabot
branch
from
96bc4aa to
445ebb6
Compare
vdemeester
left a comment
vdemeester
left a comment
There was a problem hiding this comment.
At some point we probably will want to share the code (in plumbing ?) so that if we update it somewhere we don't have to update it everywhere again 😬
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: vdemeester The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
tekton-robot
added
the
approved
|
/kind misc |
tekton-robot
added
the
kind/misc
infernus01
left a comment
infernus01
left a comment
There was a problem hiding this comment.
@jkhelil Could you please rebase?
tekton-robot
added
the
needs-rebase
|
@jkhelil: PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
5 participants
Add dependabot configuration for all active release branches (release-v0.3.x, release-v0.4.x), following the same pattern as tektoncd/pipeline.
Changes
Submitter Checklist
As the author of this PR, please check off the items in this checklist:
/kind <type>. Valid types are bug, cleanup, design, documentation, feature, flake, misc, question, tepRelease Notes