diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..44c62815 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,73 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + # github actions + - package-ecosystem: "github-actions" + target-branch: "release-v1.12.0" + directory: "/" + schedule: + # Check for updates to GitHub Actions every week + interval: "weekly" + day: "saturday" + groups: + github-actions: + patterns: + - "*" + + # csi-vxflexos packages + - package-ecosystem: docker + target-branch: "release-v1.12.0" + directories: + - /charts/csi-vxflexos + labels: + - dependencies + schedule: + # check daily + interval: daily + # at 6pm UTC + time: "18:00" + groups: + csi-vxflexos: + patterns: + - "*" + + # csm-authorization packages + - package-ecosystem: docker + target-branch: "release-v1.12.0" + directories: + - /charts/csm-authorization + labels: + - dependencies + schedule: + # check daily + interval: daily + # at 6pm UTC + time: "18:00" + groups: + csm-authorization: + patterns: + - "*" + + # karavi-observability packages + - package-ecosystem: docker + target-branch: "release-v1.12.0" + directories: + - /charts/karavi-observability + labels: + - dependencies + schedule: + # check daily + interval: daily + # at 6pm UTC + time: "18:00" + ignore: + # ignore all updates to otel/opentelemetry-collector + - dependency-name: "otel/opentelemetry-collector" + groups: + karavi-observability: + patterns: + - "*"