From d8d1bbf249cf3f0cdcfcc5efb0678dc024754bd2 Mon Sep 17 00:00:00 2001 From: Mustafa Abdelrahman Date: Fri, 6 Dec 2024 15:42:19 +0100 Subject: [PATCH] dependabot: ingore OPA updates (#3334) We decided to ignore automatically updating OPA dependencies. It was already done in https://github.com/zalando/skipper/pull/3332#issuecomment-2522944619 & https://github.com/zalando/skipper/pull/3320#issuecomment-2522931582 This PR is to add visibility and we will run `@dependabot unignore ...` after merging. See [`ignore` docs](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) Signed-off-by: Mustafa Abdelrahman --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a32cd454e0..045892bd1d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,6 +13,9 @@ updates: all-go-mod-patch-and-minor: patterns: ["*"] update-types: ["patch", "minor"] + ignore: + - dependency-name: "github.com/open-policy-agent/opa" + - dependency-name: "github.com/open-policy-agent/opa-envoy-plugin" - package-ecosystem: "github-actions" directory: "/" # For GitHub Actions, set the directory to / to check for workflow files in .github/workflows schedule: