diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7feffc817..ee41d2af2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,17 +3,7 @@ updates: - package-ecosystem: gomod directory: "/" schedule: - interval: daily - allow: - # For now, only enable the deps we know we want to keep fresh - - dependency-name: "github.com/coreos/butane" - - dependency-name: "github.com/coreos/ignition/v2" - - dependency-name: "github.com/coreos/stream-metadata-go" - -- package-ecosystem: gomod - directory: "/" - schedule: - interval: monthly + interval: weekly # Group all updates together in a single PR. We can remove some # updates from a combined update PR via comments to dependabot: # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-updates-with-comment-commands