From 093ab19b64a7562274610d7954ba97d0fa49e62b Mon Sep 17 00:00:00 2001 From: Victor Martinez Date: Wed, 26 Mar 2025 12:05:51 +0100 Subject: [PATCH 1/3] dependabot: use directories and use docker ecosystem --- .github/dependabot.yml | 58 ------------------------------------------ renovate.json | 6 ----- 2 files changed, 64 deletions(-) delete mode 100644 .github/dependabot.yml delete mode 100644 renovate.json diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index afb941790..000000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,58 +0,0 @@ ---- -version: 2 -updates: - # Enable version updates for python - - package-ecosystem: "pip" - # Look for `requirements.txt` file in the `dev-utils` directory - directory: "/dev-utils/" - # Check for updates once a week - schedule: - interval: "weekly" - day: "sunday" - time: "22:00" - reviewers: - - "elastic/apm-agent-python" - ignore: - - dependency-name: "urllib3" # ignore until lambda runtimes use OpenSSL 1.1.1+ - versions: [">=2.0.0"] - - # GitHub actions - - package-ecosystem: "github-actions" - directory: "/" - reviewers: - - "elastic/observablt-ci" - schedule: - interval: "weekly" - day: "sunday" - time: "22:00" - groups: - github-actions: - patterns: - - "*" - - # GitHub composite actions - - package-ecosystem: "github-actions" - directory: "/.github/actions/packages" - reviewers: - - "elastic/observablt-ci" - schedule: - interval: "weekly" - day: "sunday" - time: "22:00" - groups: - github-actions: - patterns: - - "*" - - - package-ecosystem: "github-actions" - directory: "/.github/actions/build-distribution" - reviewers: - - "elastic/observablt-ci" - schedule: - interval: "weekly" - day: "sunday" - time: "22:00" - groups: - github-actions: - patterns: - - "*" diff --git a/renovate.json b/renovate.json deleted file mode 100644 index 10a37617c..000000000 --- a/renovate.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "extends": [ - "github>elastic/renovate-config:only-chainguard" - ] -} From caeb5e5981d36e14f2448c61f4a84fca9d8baad0 Mon Sep 17 00:00:00 2001 From: Victor Martinez Date: Wed, 26 Mar 2025 12:22:24 +0100 Subject: [PATCH 2/3] add dependabot --- .github/dependabot.yml | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..a62c7ec17 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,42 @@ +--- +version: 2 +updates: + # Enable version updates for python + - package-ecosystem: "pip" + # Look for `requirements.txt` file in the `dev-utils` directory + directory: "/dev-utils/" + # Check for updates once a week + schedule: + interval: "weekly" + day: "sunday" + time: "22:00" + reviewers: + - "elastic/apm-agent-python" + ignore: + - dependency-name: "urllib3" # ignore until lambda runtimes use OpenSSL 1.1.1+ + versions: [">=2.0.0"] + + # GitHub actions + - package-ecosystem: "github-actions" + directories: + - '/' + - '/.github/actions/*' + reviewers: + - "elastic/observablt-ci" + schedule: + interval: "weekly" + day: "sunday" + time: "22:00" + groups: + github-actions: + patterns: + - "*" + + - package-ecosystem: "docker" + directories: + - '/' + reviewers: + - "elastic/apm-agent-python" + registries: "*" + schedule: + interval: "daily" From 00e712d59bc32b9c095746368abbc3e6cf389cef Mon Sep 17 00:00:00 2001 From: Victor Martinez Date: Wed, 26 Mar 2025 12:31:54 +0100 Subject: [PATCH 3/3] add internal docker registry --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a62c7ec17..384f44ee4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,12 @@ --- version: 2 +registries: + docker-elastic: + type: docker-registry + url: https://docker.elastic.co + username: ${{secrets.ELASTIC_DOCKER_USERNAME}} + password: ${{secrets.ELASTIC_DOCKER_PASSWORD}} + updates: # Enable version updates for python - package-ecosystem: "pip"