ci: add dependabot config for updating vendored packages

Vendored dependencies need updating on regular basis. This is currently
done manually by developers, but it can be automated by Dependabot. By
dropping the dependabot.yml config file in the .github/ directory the
bot should get enabled.

See-also: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/enabling-and-disabling-version-updates
Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos 2021-08-26 17:57:12 +02:00 committed by mergify[bot]
parent f9d4972444
commit c17b3f69bd

11
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,11 @@
---
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "weekly"
labels:
- rebase
commit-message:
prefix: "rebase"