Skip to content

Commit 778b030

Browse files
committed
ci: disable dependabot bumping singleuser-sample deps
We have a dedicated github workflow to smoothly update requirements that runs on a schedule and can be run manually if needed as well. When it is run, a PR will be created updating the requirements.txt file based on the requirements.in file using `pip-compile`.
1 parent aa38e16 commit 778b030

File tree

1 file changed

+0
-20
lines changed

1 file changed

+0
-20
lines changed

.github/dependabot.yaml

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -4,33 +4,13 @@
44
# - Status and logs from dependabot are provided at
55
# https://github.com/jupyterhub/zero-to-jupyterhub-k8s/network/updates.
66
# - YAML anchors are not supported here or in GitHub Workflows.
7-
# - versioning-strategy: lockfile-only must not be used if you only have a plain
8-
# requirements.txt like we do in images/singleuser-sample.
97
#
108
version: 2
119
updates:
12-
# Maintain Python dependencies for the jupyterhub/k8s-singleuser-sample image
13-
- package-ecosystem: pip
14-
directory: "/images/singleuser-sample"
15-
schedule:
16-
interval: daily
17-
time: "05:00"
18-
timezone: "Etc/UTC"
19-
# ignore is applied as we need to bump this version in multiple locations,
20-
# and not just in the singleuser-sample image, for which we have a dedicated
21-
# job in the watch-dependencies.yaml workflow file.
22-
#
23-
ignore:
24-
- dependency-name: jupyterhub
25-
labels:
26-
- dependencies
27-
2810
# Maintain dependencies in our GitHub Workflows
2911
- package-ecosystem: github-actions
3012
directory: "/" # This should be / rather than .github/workflows
3113
schedule:
3214
interval: weekly
3315
time: "05:00"
3416
timezone: "Etc/UTC"
35-
labels:
36-
- dependencies

0 commit comments

Comments
 (0)