From c696a5901b4448e7df5410f4301b7ffffaa9fa18 Mon Sep 17 00:00:00 2001 From: Sai Ganesh Maganti Date: Sat, 18 Apr 2026 21:19:49 +0530 Subject: [PATCH] Add optimized dependabot.yml for dependency updates Configured Dependabot for GitHub Actions, Go modules, NPM, and Docker with daily updates and specific groupings. --- .github/optimized dependabot.yml | 49 ++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .github/optimized dependabot.yml diff --git a/.github/optimized dependabot.yml b/.github/optimized dependabot.yml new file mode 100644 index 000000000..b96cb53ef --- /dev/null +++ b/.github/optimized dependabot.yml @@ -0,0 +1,49 @@ +version: 2 + +updates: + # ---------- GitHub Actions ---------- + - package-ecosystem: github-actions + directory: / + schedule: + interval: daily + groups: + actions: + patterns: ["*"] + + # ---------- Go Modules ---------- + - package-ecosystem: gomod + directories: + - / + - /pkg + schedule: + interval: daily + groups: + go-minor-patch: + update-types: ["minor", "patch"] + exclude-patterns: + - github.com/compose-spec/compose-go/v2 + + # ---------- NPM ---------- + - package-ecosystem: npm + directory: / + schedule: + interval: daily + groups: + npm-all: + patterns: ["*"] + + # ---------- Docker ---------- + - package-ecosystem: docker + directory: /pkg/config/templates + schedule: + interval: daily + commit-message: + prefix: "fix(docker):" + groups: + docker-minor-patch: + update-types: ["minor", "patch"] + ignore: + - dependency-name: library/kong + - dependency-name: axllent/mailpit + - dependency-name: darthsim/imgproxy + - dependency-name: timberio/vector