Merge pull request #48 from donpenney/enable-dependabot

CNF-16110: Add dependabot.yml config

.github/dependabot.yml

@@ -0,0 +1,24 @@
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+# Go modules
+- package-ecosystem: "gomod"
+  directory: "/" # Location of package manifests
+  schedule:
+    interval: "daily"
+  open-pull-requests-limit: 5
+  groups:
+    k8s:
+      patterns: [ "k8s.io/*", "sig.k8s.io/*" ]
+      update-types: [ "major", "minor", "patch" ]
+    golang:
+      patterns: [ "golang.org/*" ]
+      update-types: [ "major", "minor", "patch" ]
+  ignore:
+    - match:
+      # the oran-o2ims version is hand-managed
+      dependency_name: "github.com/openshift-kni/oran-o2ims/api/hardwaremanagement"
+  #ignore:
+  #  - dependency-name: "*"
+  #    update-types: ["version-update:semver-patch"]