diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 5bd107e47a80..0a9af834e715 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -7,82 +7,30 @@ updates: directory: "/" schedule: interval: "weekly" + groups: + all: # Bump all actions in a single PR. + patterns: [ "*" ] commit-message: prefix: ":seedling:" labels: - "area/ci" - "ok-to-test" -# Main Go module -- package-ecosystem: "gomod" - directory: "/" - schedule: - interval: "weekly" - day: "monday" - ## group all dependencies with a k8s.io prefix into a single PR. - groups: - kubernetes: - patterns: [ "k8s.io/*" ] - ignore: - # Ignore controller-runtime as its upgraded manually. - - dependency-name: "sigs.k8s.io/controller-runtime" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - # Ignore k8s and its transitives modules as they are upgraded manually together with controller-runtime. - - dependency-name: "k8s.io/*" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - - dependency-name: "go.etcd.io/*" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - - dependency-name: "google.golang.org/grpc" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - # Bumping the kustomize API independently can break compatibility with client-go as they share k8s.io/kube-openapi as a dependency. - - dependency-name: "sigs.k8s.io/kustomize/api" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - commit-message: - prefix: ":seedling:" - labels: - - "area/dependency" - - "ok-to-test" - - # Test Go module -- package-ecosystem: "gomod" - directory: "/test" - schedule: - interval: "weekly" - day: "tuesday" - ## group all dependencies with a k8s.io prefix into a single PR. - groups: - kubernetes: - patterns: [ "k8s.io/*" ] - ignore: - # Ignore controller-runtime as its upgraded manually. - - dependency-name: "sigs.k8s.io/controller-runtime" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - # Ignore k8s and its transitives modules as they are upgraded manually together with controller-runtime. - - dependency-name: "k8s.io/*" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - - dependency-name: "go.etcd.io/*" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - - dependency-name: "google.golang.org/grpc" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - # Bumping the kustomize API independently can break compatibility with client-go as they share k8s.io/kube-openapi as a dependency. - - dependency-name: "sigs.k8s.io/kustomize/api" - update-types: [ "version-update:semver-major", "version-update:semver-minor" ] - commit-message: - prefix: ":seedling:" - labels: - - "area/dependency" - - "ok-to-test" - - # Hack/tools Go module +# Go modules - package-ecosystem: "gomod" - directory: "/hack/tools" + directories: + - "/" + - "/test" + - "/hack/tools" schedule: interval: "weekly" day: "wednesday" + time: "08:33" ## group all dependencies with a k8s.io prefix into a single PR. groups: - kubernetes: - patterns: [ "k8s.io/*" ] + patch: # Bump all patch versions in a single PR (patch bumps rarely should lead to issues). + patterns: [ "*" ] + update-types: [ "patch" ] ignore: # Ignore controller-runtime as its upgraded manually. - dependency-name: "sigs.k8s.io/controller-runtime" diff --git a/go.mod b/go.mod index 0ce435a5ea06..0a2fcfb56441 100644 --- a/go.mod +++ b/go.mod @@ -9,7 +9,7 @@ require ( github.com/blang/semver/v4 v4.0.0 github.com/coredns/corefile-migration v1.0.21 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc - github.com/distribution/reference v0.5.0 + github.com/distribution/reference v0.6.0 github.com/drone/envsubst/v2 v2.0.0-20210730161058-179042472c46 github.com/evanphx/json-patch/v5 v5.7.0 github.com/fatih/color v1.16.0 diff --git a/go.sum b/go.sum index 66ea54e2a945..e957ed7f942c 100644 --- a/go.sum +++ b/go.sum @@ -135,8 +135,8 @@ github.com/daviddengcn/go-colortext v1.0.0 h1:ANqDyC0ys6qCSvuEK7l3g5RaehL/Xck9EX github.com/daviddengcn/go-colortext v1.0.0/go.mod h1:zDqEI5NVUop5QPpVJUxE9UO10hRnmkD5G4Pmri9+m4c= github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ= github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no= -github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0= -github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= +github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= +github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/drone/envsubst/v2 v2.0.0-20210730161058-179042472c46 h1:7QPwrLT79GlD5sizHf27aoY2RTvw62mO6x7mxkScNk0= diff --git a/hack/tools/go.mod b/hack/tools/go.mod index 61f91f188bd4..b657cf78e2a2 100644 --- a/hack/tools/go.mod +++ b/hack/tools/go.mod @@ -47,7 +47,7 @@ require ( github.com/cespare/xxhash/v2 v2.2.0 // indirect github.com/cloudflare/circl v1.3.7 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect - github.com/distribution/reference v0.5.0 // indirect + github.com/distribution/reference v0.6.0 // indirect github.com/docker/distribution v2.8.3+incompatible // indirect github.com/docker/docker v24.0.9+incompatible // indirect github.com/docker/go-connections v0.4.0 // indirect diff --git a/hack/tools/go.sum b/hack/tools/go.sum index c997ff42231d..09dc451b0ea0 100644 --- a/hack/tools/go.sum +++ b/hack/tools/go.sum @@ -92,8 +92,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= -github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0= -github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= +github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= +github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v24.0.9+incompatible h1:HPGzNmwfLZWdxHqK9/II92pyi1EpYKsAqcl4G0Of9v0= diff --git a/test/go.mod b/test/go.mod index a396d1a3b592..2da6ec5a5141 100644 --- a/test/go.mod +++ b/test/go.mod @@ -58,7 +58,7 @@ require ( github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf // indirect github.com/coreos/go-systemd/v22 v22.5.0 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect - github.com/distribution/reference v0.5.0 // indirect + github.com/distribution/reference v0.6.0 // indirect github.com/docker/distribution v2.8.3+incompatible // indirect github.com/docker/go-units v0.4.0 // indirect github.com/drone/envsubst/v2 v2.0.0-20210730161058-179042472c46 // indirect diff --git a/test/go.sum b/test/go.sum index 51542e96c04b..599ee9340828 100644 --- a/test/go.sum +++ b/test/go.sum @@ -109,8 +109,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= -github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0= -github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= +github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= +github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= github.com/docker/docker v24.0.9+incompatible h1:HPGzNmwfLZWdxHqK9/II92pyi1EpYKsAqcl4G0Of9v0=