Skip to content

chore(deps): add dependabot config for active release branches#2907

Open
jkhelil wants to merge 1 commit into
tektoncd:mainfrom
jkhelil:update_dependabot
Open

chore(deps): add dependabot config for active release branches#2907
jkhelil wants to merge 1 commit into
tektoncd:mainfrom
jkhelil:update_dependabot

Conversation

@jkhelil

@jkhelil jkhelil commented Jun 16, 2026

Copy link
Copy Markdown
Member

Add dependabot configuration for all active LTS release branches (release-v0.42.x through release-v0.45.x), following the same pattern as tektoncd/pipeline.

  • .github/dependabot.config.yml: human-editable source of truth listing active release branches and ecosystems (gomod, gomod /tools, github-actions)
  • .github/dependabot.yml: generated file with 15 update entries (main + 4 release branches x 3 ecosystems); release branches are restricted to patch-only updates
  • hack/generate-dependabot.go: Go generator that produces dependabot.yml from the config file
  • hack/generate-dependabot.sh: shell wrapper to run the generator
  • .github/workflows/dependabot-regen.yml: weekly workflow that regenerates dependabot.yml and opens a PR when changes are detected
  • releases.md: rename ## Releases to ## Release (matches the awk pattern in the generator) and move EOL entries to the End of Life section

Assisted-by: Claude Sonnet 4.6 (via Cursor)

Changes

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

  • Includes tests (if functionality changed/added)
  • Run the code checkers with make check
  • Regenerate the manpages, docs and go formatting with make generated
  • Commit messages follow commit message best practices

See the contribution guide
for more details.

Release Notes

@tekton-robot tekton-robot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Jun 16, 2026
@tekton-robot tekton-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Jun 16, 2026
Add dependabot configuration for all active LTS release branches
(release-v0.42.x through release-v0.45.x), following the same
pattern as tektoncd/pipeline.

- .github/dependabot.config.yml: human-editable source of truth
  listing active release branches and ecosystems (gomod, gomod
  /tools, github-actions)
- .github/dependabot.yml: generated file with 15 update entries
  (main + 4 release branches x 3 ecosystems); release branches
  are restricted to patch-only updates
- hack/generate-dependabot.go: Go generator that produces
  dependabot.yml from the config file
- hack/generate-dependabot.sh: shell wrapper to run the generator
- .github/workflows/dependabot-regen.yml: weekly workflow that
  regenerates dependabot.yml and opens a PR when changes are
  detected
- releases.md: rename ## Releases to ## Release (matches the awk
  pattern in the generator) and move EOL entries to the End of
  Life section

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
@jkhelil jkhelil force-pushed the update_dependabot branch from a4ca325 to 339ecfc Compare June 16, 2026 10:45

@vdemeester vdemeester left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

At some point we probably will want to share the code (in plumbing ?) so that if we update it somewhere we don't have to update it everywhere again 😬

@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants