Skip to content

Commit a009228

Browse files
openshift-ci[bot]openshift-ci[bot]
authored
Merge pull request #487 from rszwajko/dependabot_settings_no_aliases
OCPNETUI-65: Add multi-branch dependabot config
2 parents ed121ae + 4d6cc37 commit a009228

1 file changed

Lines changed: 197 additions & 0 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 197 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,197 @@
1+
version: 2
2+
updates:
3+
# Docker images are OpenShift CI streams, not Dependabot-managed
4+
# - package-ecosystem: docker
5+
6+
# --- main (default branch) ---
7+
- package-ecosystem: github-actions
8+
directory: /
9+
commit-message:
10+
prefix: 'maintenance'
11+
cooldown:
12+
default-days: 5
13+
schedule:
14+
interval: monthly
15+
groups:
16+
github-actions:
17+
patterns:
18+
- '*'
19+
20+
- package-ecosystem: npm
21+
directory: /
22+
commit-message:
23+
prefix: 'maintenance'
24+
cooldown:
25+
default-days: 5
26+
schedule:
27+
interval: weekly
28+
day: monday
29+
time: '07:00'
30+
timezone: UTC
31+
allow:
32+
- dependency-type: all
33+
update-types:
34+
- version-update:semver-minor
35+
- version-update:semver-patch
36+
ignore:
37+
# shared modules currently provided by Console (including unused) based on
38+
# https://github.com/openshift/console/blob/c46e0aabe4c9cf330f1e56ad323076e7e8e7f7d8/frontend/packages/console-dynamic-plugin-sdk/src/shared-modules/shared-modules-meta.ts#L41
39+
- dependency-name: '@openshift/dynamic-plugin-sdk'
40+
- dependency-name: '@openshift-console/dynamic-plugin-sdk'
41+
- dependency-name: '@openshift-console/dynamic-plugin-sdk-internal'
42+
- dependency-name: '@patternfly/react-topology'
43+
- dependency-name: react
44+
- dependency-name: react-i18next
45+
- dependency-name: react-redux
46+
- dependency-name: react-router
47+
- dependency-name: react-router-dom
48+
- dependency-name: react-router-dom-v5-compat
49+
- dependency-name: redux
50+
- dependency-name: redux-thunk
51+
# not shared but effectively pinned to Console version
52+
- dependency-name: '@openshift-console/dynamic-plugin-sdk-webpack'
53+
groups:
54+
npm:
55+
applies-to: version-updates
56+
patterns:
57+
- '*'
58+
npm-security:
59+
applies-to: security-updates
60+
patterns:
61+
- '*'
62+
63+
# --- release branches ---
64+
# update also minor versions - reasoning is that:
65+
# a) usually the latest minor version is the only version that receives security updates
66+
# b) minor version should not contain breaking changes
67+
# ignore list is limited to dynamic SDK packages which is only a subset of shared modules
68+
# the remaining packages follow the regular dependency update process - reasoning is that:
69+
# a) production code is unchanged and minor and patch versions should be backwards compatible
70+
# b) the Console is updating their deps in parallel so an up-to-date cluster may be close to our versions
71+
# c) shorter ignore list is more readable - note that dependabot does not support yml aliases (yet)
72+
# d) the shared modules list changed in time and would require different ignore lists per branch
73+
- package-ecosystem: npm
74+
target-branch: release-4.23
75+
directory: /
76+
commit-message:
77+
prefix: '[release-4.23] maintenance'
78+
cooldown:
79+
default-days: 5
80+
schedule:
81+
interval: weekly
82+
day: monday
83+
time: '07:00'
84+
timezone: UTC
85+
ignore:
86+
- dependency-name: '@openshift/dynamic-plugin-sdk'
87+
- dependency-name: '@openshift-console/*'
88+
allow:
89+
- dependency-type: all
90+
update-types:
91+
- version-update:semver-minor
92+
- version-update:semver-patch
93+
groups:
94+
npm:
95+
patterns:
96+
- '*'
97+
98+
- package-ecosystem: npm
99+
target-branch: release-4.22
100+
directory: /
101+
commit-message:
102+
prefix: '[release-4.22] maintenance'
103+
cooldown:
104+
default-days: 5
105+
schedule:
106+
interval: weekly
107+
day: monday
108+
time: '07:00'
109+
timezone: UTC
110+
ignore:
111+
- dependency-name: '@openshift/dynamic-plugin-sdk'
112+
- dependency-name: '@openshift-console/*'
113+
allow:
114+
- dependency-type: all
115+
update-types:
116+
- version-update:semver-minor
117+
- version-update:semver-patch
118+
groups:
119+
npm:
120+
patterns:
121+
- '*'
122+
123+
- package-ecosystem: npm
124+
target-branch: release-4.21
125+
directory: /
126+
commit-message:
127+
prefix: '[release-4.21] maintenance'
128+
cooldown:
129+
default-days: 5
130+
schedule:
131+
interval: weekly
132+
day: monday
133+
time: '07:00'
134+
timezone: UTC
135+
ignore:
136+
- dependency-name: '@openshift/dynamic-plugin-sdk'
137+
- dependency-name: '@openshift-console/*'
138+
allow:
139+
- dependency-type: all
140+
update-types:
141+
- version-update:semver-minor
142+
- version-update:semver-patch
143+
groups:
144+
npm:
145+
patterns:
146+
- '*'
147+
148+
- package-ecosystem: npm
149+
target-branch: release-4.20
150+
directory: /
151+
commit-message:
152+
prefix: '[release-4.20] maintenance'
153+
cooldown:
154+
default-days: 5
155+
schedule:
156+
interval: weekly
157+
day: monday
158+
time: '07:00'
159+
timezone: UTC
160+
ignore:
161+
- dependency-name: '@openshift/dynamic-plugin-sdk'
162+
- dependency-name: '@openshift-console/*'
163+
allow:
164+
- dependency-type: all
165+
update-types:
166+
- version-update:semver-minor
167+
- version-update:semver-patch
168+
groups:
169+
npm:
170+
patterns:
171+
- '*'
172+
173+
- package-ecosystem: npm
174+
target-branch: release-4.19
175+
directory: /
176+
commit-message:
177+
prefix: '[release-4.19] maintenance'
178+
cooldown:
179+
default-days: 5
180+
schedule:
181+
interval: weekly
182+
day: monday
183+
time: '07:00'
184+
timezone: UTC
185+
ignore:
186+
- dependency-name: '@openshift/dynamic-plugin-sdk'
187+
- dependency-name: '@openshift-console/*'
188+
allow:
189+
- dependency-type: all
190+
update-types:
191+
- version-update:semver-minor
192+
- version-update:semver-patch
193+
groups:
194+
npm:
195+
patterns:
196+
- '*'
197+

0 commit comments

Comments
 (0)