Skip to content

chore(deps): add dependabot config for active release branches#2907

Open
jkhelil wants to merge 1 commit into
tektoncd:mainfrom
jkhelil:update_dependabot
Open

chore(deps): add dependabot config for active release branches#2907
jkhelil wants to merge 1 commit into
tektoncd:mainfrom
jkhelil:update_dependabot

Conversation

@jkhelil

@jkhelil jkhelil commented Jun 16, 2026

Copy link
Copy Markdown
Member

Add dependabot configuration for all active LTS release branches (release-v0.42.x through release-v0.45.x), following the same pattern as tektoncd/pipeline.

  • .github/dependabot.config.yml: human-editable source of truth listing active release branches and ecosystems (gomod, gomod /tools, github-actions)
  • .github/dependabot.yml: generated file with 15 update entries (main + 4 release branches x 3 ecosystems); release branches are restricted to patch-only updates
  • hack/generate-dependabot.go: Go generator that produces dependabot.yml from the config file
  • hack/generate-dependabot.sh: shell wrapper to run the generator
  • .github/workflows/dependabot-regen.yml: weekly workflow that regenerates dependabot.yml and opens a PR when changes are detected
  • releases.md: rename ## Releases to ## Release (matches the awk pattern in the generator) and move EOL entries to the End of Life section

Assisted-by: Claude Sonnet 4.6 (via Cursor)

Changes

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

  • Includes tests (if functionality changed/added)
  • Run the code checkers with make check
  • Regenerate the manpages, docs and go formatting with make generated
  • Commit messages follow commit message best practices

See the contribution guide
for more details.

Release Notes

@tekton-robot tekton-robot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Jun 16, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign divyansh42 after the PR has been reviewed.
You can assign the PR to them by writing /assign @divyansh42 in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Jun 16, 2026
Add dependabot configuration for all active LTS release branches
(release-v0.42.x through release-v0.45.x), following the same
pattern as tektoncd/pipeline.

- .github/dependabot.config.yml: human-editable source of truth
  listing active release branches and ecosystems (gomod, gomod
  /tools, github-actions)
- .github/dependabot.yml: generated file with 15 update entries
  (main + 4 release branches x 3 ecosystems); release branches
  are restricted to patch-only updates
- hack/generate-dependabot.go: Go generator that produces
  dependabot.yml from the config file
- hack/generate-dependabot.sh: shell wrapper to run the generator
- .github/workflows/dependabot-regen.yml: weekly workflow that
  regenerates dependabot.yml and opens a PR when changes are
  detected
- releases.md: rename ## Releases to ## Release (matches the awk
  pattern in the generator) and move EOL entries to the End of
  Life section

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
@jkhelil jkhelil force-pushed the update_dependabot branch from a4ca325 to 339ecfc Compare June 16, 2026 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants