From 471da4eeb96492a113b7c6f3c48ab47cb21b2a26 Mon Sep 17 00:00:00 2001 From: crozzy Date: Mon, 15 May 2023 09:37:49 -0700 Subject: [PATCH] chore: Only ask dependabot to care about direct dependencies There is some confusion in the github docs about what the default is for gomod given all the direct and indirect deps are explicitly defined. This change attempts to only include the direct deps and let the indirect deps be resolved by their projects. Signed-off-by: crozzy --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2c67202f67..37d2e45505 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,9 +6,13 @@ updates: interval: "weekly" - package-ecosystem: "gomod" directory: "/" + allow: + - dependency-type: "direct" schedule: interval: "weekly" - package-ecosystem: "gomod" directory: "/config" + allow: + - dependency-type: "direct" schedule: interval: "weekly"