Skip to content

Commit

Permalink
chore: Configure Dependabot to ignore AWS SDK libraries
Browse files Browse the repository at this point in the history
akash1810 committed Jan 7, 2025

Verified

This commit was signed with the committer’s verified signature.
electrovir electrovir
1 parent 363ffd9 commit 2060837
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -7,11 +7,17 @@ updates:
directory: "/" # Location of package manifests
schedule:
interval: "monthly"
groups:
aws-sdk:
patterns:
- '@aws-sdk/*'

# We've seen issues with versions of `@aws-sdk/client-s3` later than 3.703.0 where put object requests fail with:
# > RequestTimeout: Your socket connection to the server was not read from or written to within the timeout period. Idle connections will be closed.
# Attempts to increase the timeout to 10 seconds was not successful for all cases.
# Prevent Dependabot from issuing updates to any of the AWS SDK libraries being used (listed individually, as Dependabot cannot ignore wildcards).
# Once we've identified and patched the root cause, we can revert this.
ignore:
- dependency-name: "@aws-sdk/client-s3"
- dependency-name: "@aws-sdk/credential-providers"

- package-ecosystem: 'github-actions'
directory: '/'
schedule:
interval: 'monthly'
interval: 'monthly'

0 comments on commit 2060837

Please sign in to comment.