From 6d6fa9a4447782f083be429b070c8983ac88d485 Mon Sep 17 00:00:00 2001 From: Dmitry Verkhoturov Date: Thu, 9 May 2024 01:52:37 +0200 Subject: [PATCH] add dependabot updates for GitHub Actions, Go modules and Dockerfile --- .github/dependabot.yml | 28 ++++++++++++++++++++++++++++ Dockerfile | 7 ++++--- 2 files changed, 32 insertions(+), 3 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..2e7cd5f --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,28 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + groups: + "GitHub Actions updates": + patterns: + - "*" + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "monthly" + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "monthly" + groups: + "Go modules updates": + dependency-type: "production" + "Go modules updates for tests": + dependency-type: "development" diff --git a/Dockerfile b/Dockerfile index 16170a6..d433518 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,9 +4,6 @@ ARG GIT_BRANCH ARG GITHUB_SHA ARG CI -ENV GOFLAGS="-mod=vendor" -ENV CGO_ENABLED=0 - ADD . /build WORKDIR /build @@ -21,6 +18,10 @@ RUN \ FROM ghcr.io/umputun/baseimage/app:v1.7.0 + +# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#docker +LABEL org.opencontainers.image.source="https://github.com/umputun/updater" + RUN apk add docker openssh-client RUN \