Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

github: Enable dependabot for stable branch #849

Merged
merged 1 commit into from
Jan 16, 2023

Commits on Jan 16, 2023

  1. github: Enable dependabot for stable branch

    Hubble CLI currently maintains support for the last stable branch. To
    ensure security-relevant dependencies are updated, this commit
    introduces dependabot for the current (v0.11) stable branch with the
    following configuration:
    
      - gomod dependencies are only updated if there is a security
        vulnerability in one of our dependencies.
      - docker dependencies (i.e. the alpine base image) are only update
        to the next patch version
      - github actions are always updated (this mirrors cilium/cilium's
        configuration)
    
    The goal of this configuration is to ensure we pull in security relevant
    updates, while keeping the moving parts as low as possible in the stable
    branch.
    
    Signed-off-by: Sebastian Wicki <sebastian@isovalent.com>
    gandro committed Jan 16, 2023
    Configuration menu
    Copy the full SHA
    c06c624 View commit details
    Browse the repository at this point in the history