chore: add dependabot to automate dependency updates #178
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Adds dependabot configuration to keep dependencies current. Current controller-runtime (v0.17.2) and k8s.io dependencies (v0.29.x) are behind upstream releases (controller-runtime v0.22.4, Kubernetes v1.34.1). Dependabot will create daily PRs for Go modules and GitHub Actions, and weekly PRs for Docker base images. Kubernetes dependencies are grouped to reduce PR noise. Example of PRs created by dependabot in operator-framework repositories: [PRs](https://github.com/operator-framework/operator-controller/pulls?q=dependabot+assignee%3Aanik120) See [dependabot docs](https://docs.github.com/en/code-security/dependabot/working-with-dependabot) for more info. Signed-off-by: Anik Bhattacharjee <[email protected]>
anik120
requested review from
VaishnaviHire,
cdoern,
derekhiggins,
leseb,
mfleader,
nathan-weinberg,
rhdedgar and
rhuss
as code owners
Author
|
ps: I am hoping when this is merged and dependabot starts doing it's thing, the version bumps won't have any breaking changes. If they do, then they'll have to be handled manually. But it's better to rip off that band aid now than wait even longer and have to deal with even bigger breaking changes down the line. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adds dependabot configuration to keep dependencies current. Current controller-runtime (v0.17.2) and k8s.io dependencies (v0.29.x) are behind upstream releases (controller-runtime v0.22.4, Kubernetes v1.34.1).
Dependabot will create daily PRs for Go modules and GitHub Actions, and weekly PRs for Docker base images. Kubernetes dependencies are grouped to reduce PR noise.
Example of PRs created by dependabot in operator-framework repositories: PRs
See dependabot docs for more info.
Signed-off-by: Anik Bhattacharjee [email protected]