From b7955ec0eeda4e9deaeb609c4a153dd518608afe Mon Sep 17 00:00:00 2001 From: Niels de Vos Date: Tue, 28 Feb 2023 09:55:01 +0100 Subject: [PATCH 1/2] ci: disable dependabot PR creation for `/api` dependencies Dependabot does not need to report available updates for vendored dependencies in the downstream repository. Updates to dependencies are synced from the upstream repository when needed. There is also the "Upstream First" requirement, which we follow closely. See-also: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#open-pull-requests-limit Signed-off-by: Niels de Vos --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 625d6d590..48ece239b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -53,6 +53,8 @@ updates: commit-message: prefix: "rebase" - package-ecosystem: "gomod" + # ODF only: disable PR creation, synced from upstream + open-pull-requests-limit: 0 directory: "/api" schedule: interval: "weekly" From 994ad0f9c84c0f8588206a5eab855553c274550d Mon Sep 17 00:00:00 2001 From: Niels de Vos Date: Tue, 28 Feb 2023 10:27:44 +0100 Subject: [PATCH 2/2] ci: fix markdown linter complaints Signed-off-by: Niels de Vos --- .github/PULL_REQUEST_TEMPLATE/redhat-backport.md | 1 - .github/PULL_REQUEST_TEMPLATE/redhat-sync.md | 1 - 2 files changed, 2 deletions(-) diff --git a/.github/PULL_REQUEST_TEMPLATE/redhat-backport.md b/.github/PULL_REQUEST_TEMPLATE/redhat-backport.md index a033610e8..568f3c462 100644 --- a/.github/PULL_REQUEST_TEMPLATE/redhat-backport.md +++ b/.github/PULL_REQUEST_TEMPLATE/redhat-backport.md @@ -11,4 +11,3 @@ I hereby confirm that: - [ ] branches for higher versions of the project have this change merged - [ ] this PR is not *downstream-only*, if that was the case, I would have explained its need very clearly - diff --git a/.github/PULL_REQUEST_TEMPLATE/redhat-sync.md b/.github/PULL_REQUEST_TEMPLATE/redhat-sync.md index a1a28f472..6be341276 100644 --- a/.github/PULL_REQUEST_TEMPLATE/redhat-sync.md +++ b/.github/PULL_REQUEST_TEMPLATE/redhat-sync.md @@ -6,4 +6,3 @@ The most important recent changes that we want included are: - the new foz bar baz works flawlessly - this addresses a bug where users are facing issues with XYZ - ... -