tyler.durden
/
compose
mirror of https://github.com/docker/compose.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
compose/.github/dependabot.yml

25 lines
1.0 KiB
YAML
Raw Normal View History

Add dependabot Signed-off-by: Ulysses Souza <ulyssessouza@gmail.com>
2021-12-14 16:19:41 +01:00
version: 2
updates:
- package-ecosystem: gomod
directory: /
schedule:
interval: daily
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
ignore:
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
# docker + moby deps require coordination
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/buildx"
# buildx is still 0.x
update-types: ["version-update:semver-minor"]
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
- dependency-name: "github.com/moby/buildkit"
# buildkit is still 0.x
update-types: [ "version-update:semver-minor" ]
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/cli"
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
update-types: ["version-update:semver-major"]
ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2022-08-30 14:50:23 +02:00
- dependency-name: "github.com/docker/docker"
ci: add more ignore rules to dependabot Reduce PR spam for dependencies that we manually manage. Signed-off-by: Milas Bowman <milas.bowman@docker.com>
2023-06-12 15:06:21 +02:00
update-types: ["version-update:semver-major"]
- dependency-name: "github.com/containerd/containerd"
# containerd major/minor must be kept in sync with moby
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
- dependency-name: "go.opentelemetry.io/otel/*"
# OTEL is v1.x but has some parts that are not API stable yet
update-types: [ "version-update:semver-major", "version-update:semver-minor"]