From 8e39519b45b64d5f824586e7b089c280e6ee200f Mon Sep 17 00:00:00 2001 From: SuperQ Date: Fri, 3 Jul 2026 17:28:00 +0200 Subject: [PATCH] chore: Update dependabot config * Opt-out of sync from upstream Prometheus. * Add updates for Github Actions. Signed-off-by: SuperQ --- .github/dependabot.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3be35bc7..1e8425b8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,26 @@ +### +# Avoid syncing from prometheus/prometheus: no_prometheus_repo_sync +### version: 2 updates: + - package-ecosystem: 'github-actions' + directory: '/' + schedule: + interval: 'monthly' + groups: + promci: + patterns: + - 'prometheus/promci*' + codeql: + patterns: + - 'github/codeql-action*' + # Exclude configs synced from upstream prometheus/prometheus. + exclude-paths: + - .github/workflows/container_description.yml + - .github/workflows/golangci-lint.yml + - .github/workflows/govulncheck.yml + - .github/workflows/scorecards.yml + - .github/workflows/stale.yml - package-ecosystem: 'npm' directory: '/' schedule: