docker/compose
1
0
Fork 0
mirror of https://github.com/docker/compose.git synced 2026-10-12 02:13:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: add Dependabot cooldown

Browse Source
This commit is contained in:
securityeng-bot[bot]
2026-06-03 19:18:53 +02:00
committed by Guillaume Lours
parent 7eeb7de7a2
commit f3969cdc7f
1 changed files with 21 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+21 -17
View File
@@ -1,23 +1,27 @@
---
version: 2
updates:
- package-ecosystem: gomod
directory: /
cooldown:
default-days: 7
ignore:
- dependency-name: github.com/docker/buildx
update-types:
- version-update:semver-minor
- dependency-name: github.com/moby/buildkit
update-types:
- version-update:semver-minor
- dependency-name: github.com/docker/cli
update-types:
- version-update:semver-major
- dependency-name: github.com/docker/docker
update-types:
- version-update:semver-major
- dependency-name: github.com/containerd/containerd
update-types:
- version-update:semver-major
- version-update:semver-minor
- dependency-name: go.opentelemetry.io/*
schedule:
interval: daily
ignore:
# docker + moby deps require coordination
- dependency-name: "github.com/docker/buildx"
# buildx is still 0.x
update-types: ["version-update:semver-minor"]
- dependency-name: "github.com/moby/buildkit"
# buildkit is still 0.x
update-types: [ "version-update:semver-minor" ]
- dependency-name: "github.com/docker/cli"
update-types: ["version-update:semver-major"]
- dependency-name: "github.com/docker/docker"
update-types: ["version-update:semver-major"]
- dependency-name: "github.com/containerd/containerd"
# containerd major/minor must be kept in sync with moby
update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
# OTEL dependencies should be upgraded in sync with engine, cli, buildkit and buildx projects
- dependency-name: "go.opentelemetry.io/*"