Skip to content

Commit e5d623c

Browse files
authored
ci: fix dependabot.yml to not have overlapping directories (#7070)
A package.json can only be handled by a single config. Individual dependencies can not be handled separately in a different config. Thus, this simplifies our overall config by defining increase for all our dependencies besides the OTEL api one, since that must be widened. We have to manually update it for now, until a better solution is found.
1 parent 460bf14 commit e5d623c

File tree

1 file changed

+10
-34
lines changed

1 file changed

+10
-34
lines changed

.github/dependabot.yml

Lines changed: 10 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -77,9 +77,16 @@ updates:
7777
- dependency-name: "glob"
7878
# 11.0.0 onwards only supports Node.js 20 and above
7979
update-types: ["version-update:semver-major"]
80-
# OTEL is handled separately due to the version increase here.
81-
# The package.json range should only manually be adjusted for OTEL.
82-
- dependency-name: "@opentelemetry/*"
80+
- dependency-name: "@opentelemetry/core"
81+
# 2.0.0 onwards only supports Node.js 18.19.0 and above
82+
update-types: ["version-update:semver-major"]
83+
- dependency-name: "@opentelemetry/resources"
84+
# 2.0.0 onwards only supports Node.js 18.19.0 and above
85+
update-types: ["version-update:semver-major"]
86+
# @opentelemetry/api and @opentelemetry/api-logs have to be widened, not increased.
87+
# Thus, we ignore them and update them manually.
88+
- dependency-name: "@opentelemetry/api"
89+
- dependency-name: "@opentelemetry/api-logs"
8390
groups:
8491
dev-minor-and-patch-dependencies:
8592
dependency-type: "development"
@@ -96,37 +103,6 @@ updates:
96103
- "minor"
97104
- "patch"
98105

99-
# OTEL in our supported ranges
100-
- package-ecosystem: "npm"
101-
directories:
102-
- "/"
103-
schedule:
104-
interval: "weekly"
105-
open-pull-requests-limit: 1
106-
cooldown:
107-
default-days: 5
108-
# Widen range across major versions, if possible. Ignore / manually update otherwise.
109-
versioning-strategy: "widen"
110-
labels:
111-
- dependabot
112-
- dependencies
113-
- javascript
114-
- semver-patch
115-
- OTEL
116-
ignore:
117-
- dependency-name: "@opentelemetry/core"
118-
# 2.0.0 onwards only supports Node.js 18.19.0 and above
119-
update-types: ["version-update:semver-major"]
120-
- dependency-name: "@opentelemetry/resources"
121-
# 2.0.0 onwards only supports Node.js 18.19.0 and above
122-
update-types: ["version-update:semver-major"]
123-
allow:
124-
- dependency-name: "@opentelemetry/*"
125-
groups:
126-
otel-dependencies:
127-
patterns:
128-
- "*"
129-
130106
# Instrumented library support range
131107
- package-ecosystem: "npm"
132108
directories:

0 commit comments

Comments
 (0)