From 534c43b20980db0eb835818a6e253b5f87a24146 Mon Sep 17 00:00:00 2001 From: David Levy Date: Thu, 16 Apr 2026 11:23:11 -0500 Subject: [PATCH] ci: remove docker ecosystem from dependabot The devcontainer Go base image version must match go.mod. Dependabot treats the image tag as semver and proposes invalid bumps (e.g. go:1.25 to go:2.1). The devcontainer-check.yml CI workflow already guards against version mismatches, so automated Dependabot docker updates add no value here. --- .github/dependabot.yml | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index aaa83ede..e24f6008 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -42,16 +42,3 @@ updates: github-actions: patterns: - "*" - - # Enable version updates for Dockerfile base images - - package-ecosystem: "docker" - directory: "/.devcontainer" - schedule: - interval: "weekly" - day: "monday" - labels: - - "dependencies" - - "devcontainer" - commit-message: - prefix: "deps" - include: "scope"