From 24bf9789a626f7af3941fadcacb4488914bb1882 Mon Sep 17 00:00:00 2001 From: Milas Bowman Date: Tue, 30 Aug 2022 08:50:23 -0400 Subject: [PATCH] ci: reduce noise from dependabot on Docker deps (#9770) There's a complex dependency situation with `docker/docker`, `docker/cli`, and `docker/buildkit`. Upgrading them usually needs to happen in unison to ensure compatible versions between them, particularly because `docker/buildx` is not 1.0, so has no guarantees re: compatibility, and `docker/docker` & `docker/cli` use CalVer rather than SemVer, so also have different compatibility guarantees than necessarily expected by Go tooling. Patch versions are still considered for these to ensure we don't miss important bugfixes. Signed-off-by: Milas Bowman --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 36b24f29..0662f7c9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,15 @@ updates: directory: / schedule: interval: daily + ignore: + # docker/buildx + docker/cli + docker/docker require coordination to + # ensure compatibility between them + - dependency-name: "github.com/docker/buildx" + # buildx is still 0.x + update-types: ["version-update:semver-minor"] + - dependency-name: "github.com/docker/cli" + # docker/cli uses CalVer rather than SemVer + update-types: ["version-update:semver-major", "version-update:semver-minor"] + - dependency-name: "github.com/docker/docker" + # docker/docker uses CalVer rather than SemVer + update-types: ["version-update:semver-major", "version-update:semver-minor"]