diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a1da0e6d0a..0cb3fae9bf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -155,63 +155,3 @@ updates: - "area/dependency" - "ok-to-test" ## release-0.12 branch config ends here -## release-0.11 branch config starts here -# github-actions -- directory: "/" - package-ecosystem: "github-actions" - schedule: - interval: "weekly" - day: "monday" - target-branch: release-0.11 - groups: - all-github-actions: - patterns: ["*"] - commit-message: - prefix: ":seedling:" - include: scope - labels: - - "area/dependency" - - "ok-to-test" -# Go directories -- directories: - - "/" - - "/hack/tools" - - "/orc" - package-ecosystem: "gomod" - schedule: - interval: "weekly" - day: "monday" - target-branch: release-0.11 - groups: - all-go-mod-patch-and-minor: - patterns: ["*"] - update-types: ["patch", "minor"] - commit-message: - prefix: ":seedling:" - include: scope - ignore: - # Ignore CAPI major and minor bumps - - dependency-name: "sigs.k8s.io/cluster-api*" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - # Ignore controller-runtime major and minor bumps as its upgraded manually. - - dependency-name: "sigs.k8s.io/controller-runtime" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - # Ignore k8s major and minor bumps and its transitives modules - - dependency-name: "k8s.io/*" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - - dependency-name: "sigs.k8s.io/controller-tools" - update-types: ["version-update:semver-major", "version-update:semver-minor"] - # We will need k8s v0.31.3 to bump structured-merge-diff to v4.4.2 (check git history for details). - - dependency-name: "sigs.k8s.io/structured-merge-diff/*" - # These dependencies are skipped because they require a newer version of go: - - dependency-name: "github.com/a8m/envsubst" - - dependency-name: "github.com/onsi/ginkgo/v2" - - dependency-name: "github.com/onsi/gomega" - - dependency-name: "github.com/prometheus/client_golang" - - dependency-name: "go.uber.org/mock" - - dependency-name: "golang.org/x/crypto" - - dependency-name: "golang.org/x/text" - labels: - - "area/dependency" - - "ok-to-test" -## release-0.11 branch config ends here diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml index f4bdf3dacf..2b93cfc0c1 100644 --- a/.github/workflows/security-scan.yaml +++ b/.github/workflows/security-scan.yaml @@ -13,7 +13,7 @@ jobs: strategy: fail-fast: false matrix: - branch: [main, release-0.13, release-0.12, release-0.11] + branch: [main, release-0.13, release-0.12] name: Trivy runs-on: ubuntu-latest steps: