From d458b7b8d082680d794dc5874b5504e39e55dd97 Mon Sep 17 00:00:00 2001 From: Jari Voutilainen Date: Thu, 20 Jun 2024 09:16:27 +0300 Subject: [PATCH 1/2] AV-2226: Update dependabot configuration to update ckan requirements, github actions, missing docker files and cdk dependecies --- .github/dependabot.yml | 33 +++++++++++++++++++++++++++------ 1 file changed, 27 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e9ad0ea425..badaa07c95 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,16 +7,11 @@ registries: updates: - package-ecosystem: pip - directory: "/" + directory: "/ckan/" schedule: interval: daily time: "03:00" open-pull-requests-limit: 10 - ignore: - - dependency-name: flake8 - versions: - - 3.8.4 - - 3.9.0 - package-ecosystem: "docker" directory: "/ckan/" schedule: @@ -40,6 +35,18 @@ updates: interval: daily time: "03:00" open-pull-requests-limit: 10 +- package-ecosystem: "docker" + directory: "/docker/postgres/" + schedule: + interval: daily + time: "03:00" + open-pull-requests-limit: 10 +- package-ecosystem: "docker" + directory: "/docker/datapusher-plus/" + schedule: + interval: daily + time: "03:00" + open-pull-requests-limit: 10 - package-ecosystem: npm directory: "/" schedule: @@ -75,3 +82,17 @@ updates: interval: daily time: "03:00" open-pull-requests-limit: 10 + +- package-ecosystem: npm + directory: "/cdk/" + schedule: + interval: daily + time: "03:00" + open-pull-requests-limit: 10 + + +- package-ecosystem: "github-actions" + directory: "/" + schedule: + # Check for updates to GitHub Actions every week + interval: "weekly" From 53a8d59d84568706e2b602f629ae6730b01470c9 Mon Sep 17 00:00:00 2001 From: Jari Voutilainen Date: Thu, 20 Jun 2024 09:29:35 +0300 Subject: [PATCH 2/2] Add dependabot validation workflow --- .github/workflows/dependabot-validate.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/workflows/dependabot-validate.yml diff --git a/.github/workflows/dependabot-validate.yml b/.github/workflows/dependabot-validate.yml new file mode 100644 index 0000000000..d03f1beea0 --- /dev/null +++ b/.github/workflows/dependabot-validate.yml @@ -0,0 +1,19 @@ +name: dependabot validate + +on: + pull_request: + paths: + - '.github/dependabot.yml' + - '.github/workflows/dependabot-validate.yml' +jobs: + validate: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: marocchino/validate-dependabot@v3 + id: validate + - uses: marocchino/sticky-pull-request-comment@v2 + if: always() + with: + header: validate-dependabot + message: ${{ steps.validate.outputs.markdown }}