Skip to content

Commit 7ab1794

Browse files
committed
build: Make dependabot ignores more targeted
Currently all `k8s.io/*` dependencies are skipped by dependabot in order for in order to retain compatibility with `sigs.k8s.io/controller-runtime`. However, this also skips certain dependencies such as `k8s.io/kubelet` which are not dependencies of controller-runtime and thus never get updated. This commit updates dependabot to have more targeted ignores to ensure that other `k8s.io` dependencies do get updated when necessary.
1 parent 82c0a67 commit 7ab1794

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

.github/dependabot.yml

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,12 @@ updates:
2323
# Ignore controller-runtime major and minor as it's upgraded together with sigs.k8s.io/cluster-api.
2424
- dependency-name: "sigs.k8s.io/controller-runtime"
2525
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
26-
# Ignore k8s modules major and minor as they are upgraded together with controller-runtime.
27-
- dependency-name: "k8s.io/*"
26+
# Ignore specific k8s modules major and minor as they are upgraded together with controller-runtime.
27+
# This prevents Dependabot from creating a PR for every minor update of these modules which would be
28+
# incompatible with the current version of controller-runtime and therefore just closed.
29+
- dependency-name: "k8s.io/api*"
30+
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
31+
- dependency-name: "k8s.io/client-go"
2832
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
2933
# Ignore ntnx-api-golang-clients modules major, minor, and patch as they are upgraded together with prism-go-client.
3034
- dependency-name: "github.com/nutanix/ntnx-api-golang-clients/*"

0 commit comments

Comments
 (0)