dependabot.yaml

version: 2
updates:
  - package-ecosystem: gomod
    directory: /
    labels:
      - dependencies
      - dependencies-go
      - team/triage
      - changelog/no-changelog
    milestone: 22
    ignore:
      # These dependencies are replaced in the main go.mod file.
      # They are ignored since bumping them would have no effect on the build.
      # To update them automatically, it is necessary to remove the `replace` directive.
      - dependency-name: k8s.io/*
      - dependency-name: github.com/cihub/seelog
      - dependency-name: github.com/containerd/cgroups
      - dependency-name: github.com/containerd/containerd
      - dependency-name: github.com/coreos/go-systemd
      # We only replace github.com/docker/distribution but we ignore all Docker dependencies.
      - dependency-name: github.com/docker/*
      - dependency-name: github.com/florianl/go-conntrack
      - dependency-name: github.com/iovisor/gobpf
      - dependency-name: github.com/lxn/walk
      - dependency-name: github.com/mholt/archiver
      - dependency-name: github.com/prometheus/client_golang
      - dependency-name: github.com/spf13/cast
      - dependency-name: github.com/ugorji/go
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
    groups:
      franz-go:
        patterns:
          - "github.com/twmb/franz-go*"
      bun:
        patterns:
          - "github.com/uptrace/bun*"
  - package-ecosystem: gomod
    directory: /pkg/trace
    labels:
      - dependencies
      - dependencies-go
      - team/agent-apm
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
      # See https://github.com/DataDog/datadog-agent/pull/10112
      - dependency-name: github.com/mailru/easyjson
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/gohai
    labels:
      - dependencies
      - dependencies-go
      - team/agent-shared-components
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
      # See https://github.com/DataDog/datadog-agent/pull/10112
      - dependency-name: github.com/mailru/easyjson
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/obfuscate
    labels:
      - dependencies
      - dependencies-go
      - team/agent-apm
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
      # See https://github.com/DataDog/datadog-agent/pull/10112
      - dependency-name: github.com/mailru/easyjson
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/security/secl
    labels:
      - dependencies
      - dependencies-go
      - team/agent-security
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /internal/tools
    labels:
      - dependencies
      - dependencies-go
      - dependencies-go-tools # This makes the go_mod_tidy Github Action not run go tools from this
                              # package on Dependabot PRs. Otherwise, a malicious dependency could
                              # publish a new version exploiting that it runs automatically after it
                              # is updated to write to our repo.
      - dev/tooling
      - team/agent-build-and-releases
      - changelog/no-changelog
      - qa/no-code-change
    milestone: 22
    schedule:
      interval: monthly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/networkdevice/profile
    labels:
      - dependencies
      - dependencies-go
      - team/network-device-monitoring
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /test/new-e2e
    labels:
      - dependencies
      - dependencies-go
      - team/agent-e2e-test
      - changelog/no-changelog
      - qa/no-code-change
      - dev/testing
    milestone: 22
    ignore:
      # Ignore test-infra-definitions because bumping the GO package inside `go.mod`
      # requires to also bump `TEST_INFRA_DEFINITIONS_BUILDIMAGES` inside `.gitlab-ci.yml`
      # and dependabot isn’t able to keep those two synchronized.
      - dependency-name: github.com/DataDog/test-infra-definitions
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /test/fakeintake
    labels:
      - dependencies
      - dependencies-go
      - team/agent-e2e-test
      - changelog/no-changelog
      - qa/no-code-change
      - dev/testing
    milestone: 22
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: pip
    directory: /test/e2e/cws-tests
    labels:
      - dependencies
      - python
      - team/agent-security
      - changelog/no-changelog
      - qa/no-code-change
      - dev/tooling
    milestone: 22
    schedule:
      interval: monthly
    open-pull-requests-limit: 100
  - package-ecosystem: docker
    directory: /test/fakeintake
    labels:
      - dependencies
      - team/agent-e2e-test
      - changelog/no-changelog
      - qa/no-code-change
      - dev/testing
    milestone: 22
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: github-actions
    directory: /
    labels:
      - dependencies
      - dependencies-github-actions
      - team/agent-ci-experience
      - changelog/no-changelog
      - qa/no-code-change
      - dev/tooling
    milestone: 22
    schedule:
      interval: weekly
    open-pull-requests-limit: 100