From f186b93c930da634c1d6989f9b6240d654f38ea8 Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Mon, 9 Oct 2023 15:14:17 +0100 Subject: [PATCH 1/2] Add dependabot configuration for Go dependencies --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6f6dc549e04..1fa77852898 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -17,3 +17,13 @@ updates: ignore: - dependency-name: '*' update-types: ['version-update:semver-patch', 'version-update:semver-minor'] + + - package-ecosystem: "gomod" + directory: "go" + schedule: + interval: "daily" + allow: + - dependency-name: "golang.org/x/mod" + - dependency-name: "golang.org/x/tools" + reviewers: + - "github/codeql-go-team" From ce905bba41ad83407860dd65e90870a6d03f60fb Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Tue, 10 Oct 2023 14:21:20 +0100 Subject: [PATCH 2/2] Apply suggestions from code review Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com> --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1fa77852898..e866edb0464 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -26,4 +26,4 @@ updates: - dependency-name: "golang.org/x/mod" - dependency-name: "golang.org/x/tools" reviewers: - - "github/codeql-go-team" + - "github/codeql-go"