Skip to content

Commit

Permalink
Drop root go.mod dependencies from dependabot (#163)
Browse files Browse the repository at this point in the history
In order to use a Go library, users must upgrade their dependencies to
be at least as up-to-date as those listed in the library's `go.mod`. As
@abhinav pointed out, using dependabot to then keep our dependencies
up-to-date all the time will cause any users of this library to have to
keep theirs up-to-date all the time as well, when this isn't strictly
necessary due to Go's heavy backwards compatibility culture.

Remove the section referring to the root's `go.mod` so that we can
instead only upgrade dependencies when necessary to avoid too much churn
with users of the library.
  • Loading branch information
JacobOaks committed Mar 4, 2024
1 parent 7638c0a commit 986b50e
Showing 1 changed file with 1 addition and 6 deletions.
7 changes: 1 addition & 6 deletions .github/dependabot.yaml
Original file line number Diff line number Diff line change
@@ -1,10 +1,5 @@
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 5
- package-ecosystem: "gomod"
directory: "/tools"
schedule:
Expand All @@ -23,4 +18,4 @@ updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
interval: "weekly"

0 comments on commit 986b50e

Please sign in to comment.