chore(deps): only allow semver-patch dependabot updates for k8s deps (#…

…2197)
kanisterio · Jul 19, 2023 · 2cc388f · 2cc388f
1 parent 2494994
commit 2cc388f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -10,6 +10,12 @@ updates:
     ignore:
       # Dependabot opens PRs for older versions of openshift that would downgrade the version in use.
       - dependency-name: "github.com/openshift/api"
+      - dependency-name: "k8s.io/*"
+        # only allow patch updates
+        update-types: ["version-update:semver-major","version-update:semver-minor"]
+      - dependency-name: "sigs/k8s.io/*"
+        # only allow patch updates
+        update-types: ["version-update:semver-major","version-update:semver-minor"]
     groups:
       # create large PR upgrading multiple infrastructure dependencies in one shot,
       # only include upstream dependencies that are stable and have somewhat