ci: Have Dependabot auto-update upstream parser libraries (#886)

Signed-off-by: James Alseth <james@jalseth.me>
open-policy-agent · Nov 26, 2023 · 7f56296 · 7f56296
1 parent 1815e91
commit 7f56296
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,7 +6,19 @@ updates:
   - package-ecosystem: "gomod"
     directory: "/"
     allow:
+      # OPA
       - dependency-name: "github.com/open-policy-agent/opa"
+      # Upstream Parsers
+      - dependency-name: "cuelang.org/go"
+      - dependency-name: "github.com/BurntSushi/toml"
+      - dependency-name: "github.com/CycloneDX/cyclonedx-go"
+      - dependency-name: "github.com/cpuguy83/dockercfg"
+      - dependency-name: "github.com/go-ini/ini"
+      - dependency-name: "github.com/google/go-jsonnet"
+      - dependency-name: "github.com/hashicorp/hcl"
+      - dependency-name: "github.com/magiconair/properties"
+      - dependency-name: "github.com/spdx/tools-golang"
+      - dependency-name: "github.com/subosito/gotenv"
     schedule:
       interval: "daily"