Merge pull request #551 from docker/remove_dependabot

Remove dependabot and add a check-dependencies command in make file

.dependabot/config.yml

@@ -1,5 +0,0 @@
-version: 1
-update_configs:
-  - package_manager: "go:modules"
-    directory: "/"
-    update_schedule: "daily"

.github/workflows/ci.yml

@@ -18,24 +18,6 @@ jobs:
       - name: Checkout code into the Go module directory
         uses: actions/checkout@v2
 
-      # https://github.com/dependabot/dependabot-core/issues/1995
-      - name: Update dependabot PR
-        if: github.event.pusher.name == 'dependabot-preview[bot]'
-        run: |
-          git config --local user.email "compose-cli-ci@docker.com"
-          git config --local user.name "CI GitHub Action"
-          go mod tidy -v
-          git add .
-          git commit -sm'Update go.sum after dependabot PR'
-
-      - name: Update dependabot PR if needed
-        if: github.event.pusher.name == 'dependabot-preview[bot]'
-        uses: ad-m/github-push-action@master
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: ${{ github.ref }}
-          force: false
-
       - name: Validate go-mod is up-to-date and license headers
         run: make validate
 

Makefile

@@ -75,6 +75,9 @@ lint: ## run linter(s)
 	--build-arg GIT_TAG=$(GIT_TAG) \
 	--target lint
 
+check-dependencies: ## check dependency updates
+	go list -u -m -f '{{if not .Indirect}}{{if .Update}}{{.}}{{end}}{{end}}' all
+
 import-restrictions: ## run import-restrictions script
 	@docker build . \
 	--target import-restrictions
@@ -99,4 +102,4 @@ help: ## Show help
 
 FORCE:
 
-.PHONY: all validate protos cli e2e-local cross test cache-clear lint serve classic-link help
+.PHONY: all validate protos cli e2e-local cross test cache-clear lint check-dependencies serve classic-link help