Fix dependabot config (#106)

Signed-off-by: Todd Ekenstam <[email protected]>
keikoproj · Sep 22, 2023 · 0e51f77 · 0e51f77
1 parent 9db1009
commit 0e51f77
Showing 1 changed file with 14 additions and 13 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -5,25 +5,26 @@
 
 version: 2
 updates:
-  # Maintain dependencies for GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "daily"
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:
-      interval: "weekly"
-    allow:
-      - dependency-type: "direct"
+      interval: "monthly"
     ignore:
-      - dependency-name: "k8s.io*"
-        update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
-      - dependency-name: "*"
+      - dependency-name: "k8s.io*" ## K8s module version updates should be done explicitly
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "sigs.k8s.io*" ## K8s module version updates should be done explicitly
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "*" ## Major version updates should be done explicitly
         update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+
   - package-ecosystem: "docker"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
     ignore:
-      - dependency-name: "golang"
+      - dependency-name: "golang" ## Golang version should be done explicitly