[no-relnote] Update dependabot

Signed-off-by: Evan Lezar <[email protected]>
NVIDIA · Dec 4, 2024 · 30c1aab · 30c1aab
1 parent 9318aaf
commit 30c1aab
Showing 1 changed file with 76 additions and 31 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,72 +3,117 @@
 
 version: 2
 updates:
+# main branch
   - package-ecosystem: "gomod"
     target-branch: main
-    directory: "/"
+    directories:
+    - "/"
+    - "deployments/devel"
     schedule:
-      interval: "weekly"
-      day: "sunday"
-    ignore:
-    - dependency-name: k8s.io/*
+      interval: "daily"
     labels:
     - dependencies
+    groups:
+      k8sio:
+        patterns:
+        - k8s.io/*
+        exclude-patterns:
+        - k8s.io/klog/*
 
   - package-ecosystem: "docker"
     target-branch: main
-    directory: "/deployments/container"
+    directories:
+    # CUDA image
+    - "/deployments/container"
+    # Golang version
+    - "/deployments/devel"
     schedule:
       interval: "daily"
+    labels:
+    - dependencies
 
-  - package-ecosystem: "gomod"
-    # This defines a specific dependabot rule for the latest release-* branch.
-    target-branch: release-1.16
+  - package-ecosystem: "github-actions"
+    target-branch: main
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "sunday"
-    ignore:
-    - dependency-name: k8s.io/*
+      interval: "daily"
     labels:
     - dependencies
-    - maintenance
 
-  - package-ecosystem: "docker"
-    target-branch: release-1.16
-    directory: "/deployments/container"
+  # Allow dependabot to update the libnvidia-container submodule.
+  - package-ecosystem: "gitsubmodule"
+    target-branch: main
+    directory: "/"
+    allow:
+    - dependency-name: "third_party/libnvidia-container"
     schedule:
       interval: "daily"
     labels:
     - dependencies
-    - maintenance
+    - libnvidia-container
 
+# The release branch(es):
   - package-ecosystem: "gomod"
-    target-branch: main
-    directory: "deployments/devel"
+    target-branch: release-1.17
+    directories:
+    - "/"
+    # We don't update development or test dependencies on release branches
+    # - "deployments/devel"
+    # - "tests"
     schedule:
       interval: "weekly"
       day: "sunday"
+    labels:
+    - dependencies
+    - maintenance
+    ignore:
+    # For release branches we only consider patch updates.
+    - dependency-name: "*"
+      update-types:
+      - version-update:semver-major
+      - version-update:semver-minor
+    groups:
+      k8sio:
+        patterns:
+        - k8s.io/*
+        exclude-patterns:
+        - k8s.io/klog/*
 
-  # A dependabot rule to bump the golang version.
   - package-ecosystem: "docker"
-    target-branch: main
-    directory: "/deployments/devel"
+    target-branch: release-1.17
+    directories:
+    # CUDA image
+    - "/deployments/container"
+    # Golang version
+    - "/deployments/devel"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+      day: "sunday"
+    ignore:
+    # For release branches we only apply patch updates to the golang version.
+    - dependency-name: "*golang*"
+      update-types:
+      - version-update:semver-major
+      - version-update:semver-minor
+    labels:
+    - dependencies
+    - maintenance
 
   - package-ecosystem: "github-actions"
+    target-branch: release-1.17
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+      day: "sunday"
+    labels:
+    - dependencies
+    - maintenance
 
-  # Allow dependabot to update the libnvidia-container submodule.
-  - package-ecosystem: "gitsubmodule"
-    target-branch: main
+  # Github actions need to be gh-pages branches.
+  - package-ecosystem: "github-actions"
+    target-branch: gh-pages
     directory: "/"
-    allow:
-    - dependency-name: "third_party/libnvidia-container"
     schedule:
       interval: "daily"
     labels:
     - dependencies
-    - libnvidia-container