tyler.durden
/
compose
mirror of https://github.com/docker/compose.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
compose/.github/dependabot.yml

24 lines
1009 B
YAML
Raw Permalink Normal View History

Add dependabot Signed-off-by: Ulysses Souza <ulyssessouza@gmail.com>
2021-12-14 16:19:41 +01:00
version: 2
updates:
- package-ecosystem: gomod
directory: /
schedule:
interval: daily
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
ignore:
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
# docker + moby deps require coordination
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/buildx"
# buildx is still 0.x
update-types: ["version-update:semver-minor"]
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
- dependency-name: "github.com/moby/buildkit"
# buildkit is still 0.x
update-types: [ "version-update:semver-minor" ]
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/cli"
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
update-types: ["version-update:semver-major"]
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/docker"
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
update-types: ["version-update:semver-major"]
- dependency-name: "github.com/containerd/containerd"
# containerd major/minor must be kept in sync with moby
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
remove all dependabot update PRs for OTel dependencies Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>
2024-07-23 10:56:42 +02:00
# OTEL dependencies should be upgraded in sync with engine, cli, buildkit and buildx projects
- dependency-name: "go.opentelemetry.io/*"