Skip to content

🌱 ci: add dependabot config for nested Go modules - #2857

Open
tmshort wants to merge 1 commit into
mainfrom
fix/dependabot-nested-go-mods
Open

🌱 ci: add dependabot config for nested Go modules#2857
tmshort wants to merge 1 commit into
mainfrom
fix/dependabot-nested-go-mods

Conversation

@tmshort

@tmshort tmshort commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Adds dependabot entries for the two nested go.mod files that were not previously tracked:
    • hack/ci/custom-linters/analyzers/testdata/
    • hack/tools/test-profiling/

Why

Dependabot was only watching the root go.mod. The nested modules drifted, which caused unit-test-basic to fail when the root module was bumped but the nested testdata module was not (root module upgraded to v1.4.4, testdata still had v1.4.3, and CI runs with GOPROXY=off).

With this change, dependabot will open PRs for all three Go modules independently, keeping them in sync.

Test plan

  • Dependabot opens PRs for the nested modules on the next daily run

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Added automated daily maintenance checks for selected development tooling.
    • Updates are now paced with a 14-day cooldown to reduce disruption.
    • Automated maintenance commits use a consistent format for easier identification.

Adds dependabot entries for the two nested go.mod files that were not
previously tracked, which caused version drift and CI failures when
the root module was bumped but the nested modules were not.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Copilot AI lite review requested due to automatic review settings August 6, 2026 20:11
@openshift-ci
openshift-ci Bot requested review from fgiudici and joelanford August 6, 2026 20:11
@openshift-ci

openshift-ci Bot commented Aug 6, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign perdasilva for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@netlify

netlify Bot commented Aug 6, 2026

Copy link
Copy Markdown

Deploy Preview for olmv1 ready!

Name Link
🔨 Latest commit b836d38
🔍 Latest deploy log https://app.netlify.com/projects/olmv1/deploys/6a74ea8e7361240008743db8
😎 Deploy Preview https://deploy-preview-2857--olmv1.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@coderabbitai

coderabbitai Bot commented Aug 6, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Dependabot now checks two Go module directories daily. Each configuration applies a 14-day cooldown and uses the :seedling: commit prefix.

Changes

Dependabot Go Module Updates

Layer / File(s) Summary
Go module update configuration
.github/dependabot.yml
Added daily gomod updates for the custom-linter analyzer test data and test-profiling directories. Both configurations use a 14-day cooldown and the :seedling: commit prefix.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: copilot

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly identifies the addition of Dependabot configuration for nested Go modules.
Description check ✅ Passed The description explains the changes, motivation, affected modules, and test plan; the omitted reviewer checklist is non-critical.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/dependabot-nested-go-mods

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@tmshort tmshort closed this Aug 7, 2026
@tmshort tmshort reopened this Aug 7, 2026
@tmshort tmshort changed the title ci: add dependabot config for nested Go modules 🌱 ci: add dependabot config for nested Go modules Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants