From 3c35cd9946d44959dad523510445db627a31e96a Mon Sep 17 00:00:00 2001 From: Achilleas Koutsou Date: Tue, 12 Aug 2025 15:29:22 +0200 Subject: [PATCH] github: disable Go dep updates through dependabot We now use gobump to manage Go dependencies. gobump supports holding back dependency updates that require newer go compiler versions than the one specified in the project's go.mod. --- .github/dependabot.yml | 16 +--------------- 1 file changed, 1 insertion(+), 15 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d647e0da7..e10554a8d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,4 @@ -# Basic test trying dependabot - +--- version: 2 updates: @@ -11,16 +10,3 @@ updates: time: "04:00" open-pull-requests-limit: 5 rebase-strategy: "disabled" - - # Maintain dependencies for Go - - package-ecosystem: "gomod" - directory: "/" - schedule: - interval: "daily" - time: "04:00" - groups: - go-deps: - patterns: - - "*" # group all dependency updates into one PR - open-pull-requests-limit: 1 - rebase-strategy: "auto"