teleport/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: gomod
    directory: "/"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    ignore:
      # Breaks backwards compatibility
      - dependency-name: github.com/gravitational/ttlmap
      # Must be kept in-sync with libbpf
      - dependency-name: github.com/aquasecurity/libbpfgo
      # Forked/replaced dependencies
      - dependency-name: github.com/alecthomas/kingpin/v2
      - dependency-name: github.com/coreos/go-oidc
      - dependency-name: github.com/go-mysql-org/go-mysql
      - dependency-name: github.com/gogo/protobuf
      - dependency-name: github.com/julienschmidt/httprouter
      - dependency-name: github.com/keys-pub/go-libfido2
      - dependency-name: github.com/microsoft/go-mssqldb
      - dependency-name: github.com/redis/go-redis/v9
      - dependency-name: github.com/vulcand/predicate
      # Ignore until kube libs are upgraded. See https://github.com/kubernetes-sigs/controller-runtime/issues/2788.
      - dependency-name: k8s.io/*
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - zmb3
      - hugoShaka
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/api"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - zmb3
      - hugoShaka
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/assets/aws"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    ignore:
      # Forked/replaced dependencies
      - dependency-name: github.com/alecthomas/kingpin/v2
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - tcsc
      - zmb3
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/assets/backport"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - zmb3
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/build.assets/tooling"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    ignore:
      # Forked/replaced dependencies
      - dependency-name: github.com/alecthomas/kingpin/v2
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - fheinecke
      - rosstimothy
      - zmb3
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/integrations/terraform"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    ignore:
      # breaks compatibility
      - dependency-name: github.com/hashicorp/terraform-plugin-framework
      - dependency-name: github.com/hashicorp/terraform-plugin-go
      - dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - hugoShaka
      - tigrato
      - marcoandredinis
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"

  - package-ecosystem: gomod
    directory: "/integrations/event-handler"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    open-pull-requests-limit: 20
    groups:
      go:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - hugoShaka
      - tigrato
      - marcoandredinis
    labels:
      - "dependencies"
      - "go"
      - "no-changelog"


  - package-ecosystem: cargo
    directory: "/"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    open-pull-requests-limit: 20
    groups:
      rust:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - zmb3
    labels:
      - "dependencies"
      - "rust"
      - "no-changelog"

  - package-ecosystem: cargo
    directory: "/lib/srv/desktop/rdp/rdpclient"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    open-pull-requests-limit: 20
    groups:
      rust:
        update-types:
          - "minor"
          - "patch"
    reviewers:
      - rosstimothy
      - zmb3
    labels:
      - "dependencies"
      - "rust"
      - "no-changelog"

  - package-ecosystem: npm
    directory: "/"
    schedule:
      interval: monthly
      day: "sunday"
      time: "09:00" # 9am UTC
    labels:
      - "dependencies"
      - "ui"
      - "no-changelog"
    groups:
      electron:
        patterns:
        - "electron*"
      ui:
        update-types:
          - "minor"
          - "patch"
        exclude-patterns:
          - "electron*"
    open-pull-requests-limit: 20
    reviewers:
      - avatus
      - kimlisa
      - rudream
      - bl-nero
      - gzdunek
      - ravicious
      - ryanclark
  - package-ecosystem: github-actions
    directory: "/.github/workflows"
    schedule:
      interval: monthly
      day: monday
      time: "09:00"
      timezone: "America/Los_Angeles"
    reviewers:
      - fheinecke
      - camscale
    labels:
      - "dependencies"
      - "github-actions"
      - "no-changelog"

  - package-ecosystem: github-actions
    directory: "/.github/actions"
    schedule:
      interval: monthly
      day: monday
      time: "09:00"
      timezone: "America/Los_Angeles"
    reviewers:
      - fheinecke
      - camscale
    labels:
      - "dependencies"
      - "github-actions"
      - "no-changelog"