From 75f4e7a39a135e707bdb2ae6ecc013ed57c6b6c3 Mon Sep 17 00:00:00 2001 From: Dusty Mabe Date: Wed, 18 Jun 2025 18:37:15 -0400 Subject: [PATCH] github/dependabot: merge two configs together Apparently you can't have two config entries for `gomod` so we'll have to merge these two together. I'll just compromise and go from daily in one and monthly in the other and settle on weekly for both. Unfortunately there isn't really a way to validate your dependabot config before merging the PR and going to the dependabot tab so we'll YOLO until it works. --- .github/dependabot.yml | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7feffc817..ee41d2af2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,17 +3,7 @@ updates: - package-ecosystem: gomod directory: "/" schedule: - interval: daily - allow: - # For now, only enable the deps we know we want to keep fresh - - dependency-name: "github.com/coreos/butane" - - dependency-name: "github.com/coreos/ignition/v2" - - dependency-name: "github.com/coreos/stream-metadata-go" - -- package-ecosystem: gomod - directory: "/" - schedule: - interval: monthly + interval: weekly # Group all updates together in a single PR. We can remove some # updates from a combined update PR via comments to dependabot: # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-updates-with-comment-commands