mirror of
https://github.com/tendermint/tendermint.git
synced 2026-01-07 05:46:32 +00:00
As per discussion with @sergio-mena, this should disable all automated dependency updates that are not security-related. We should make this part of our standard practice when cutting new major releases, given that our QA process for major releases is expensive at present and we cannot re-run it for every dependency update. Once we have cut a final major release, we can consider re-enabling automated dependency updates here that can be rolled out in minor releases. Signed-off-by: Thane Thomson <connect@thanethomson.com> Signed-off-by: Thane Thomson <connect@thanethomson.com>
74 lines
1.5 KiB
YAML
74 lines
1.5 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "main"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "v0.37.x"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "v0.34.x"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|
|
|
|
- package-ecosystem: npm
|
|
directory: "/docs"
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 10
|
|
|
|
###################################
|
|
##
|
|
## Update All Go Dependencies
|
|
|
|
- package-ecosystem: gomod
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "main"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|
|
|
|
- package-ecosystem: gomod
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "v0.37.x"
|
|
# Only allow automated security-related dependency updates until we cut the
|
|
# final v0.37.0 release.
|
|
open-pull-requests-limit: 0
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|
|
|
|
- package-ecosystem: gomod
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
target-branch: "v0.34.x"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- T:dependencies
|
|
- S:automerge
|