Allow k8s.io dependabot tracking on the 0.14/0.15 branches

This ensures we get bug fixes on the appropriate k8s.io branches. There's no point in configuring earlier branches than 0.14, because the versions of k8s.io they track have reached their EOL. We can revisit this if we bump to a supported k8s.io release on those release branches. Signed-off-by: Stephen Kitt <[email protected]>
submariner-io · Jul 26, 2023 · b58befd · b58befd
1 parent d449fbf
commit b58befd
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -25,6 +25,30 @@ updates:
     target-branch: release-0.15
     schedule:
       interval: monthly
+  - package-ecosystem: gomod
+    target-branch: "release-0.14"
+    directory: "/"
+    schedule:
+      interval: weekly
+    allow:
+      # Pick up k8s.io updates
+      - dependency-name: k8s.io/apiextensions-apiserver
+    ignore:
+      # 0.14 tracks the 0.25 branch
+      - dependency-name: k8s.io/*
+        versions: ">= 0.26.0-alpha.0"
+  - package-ecosystem: gomod
+    target-branch: "release-0.15"
+    directory: "/"
+    schedule:
+      interval: weekly
+    allow:
+      # Pick up k8s.io updates
+      - dependency-name: k8s.io/apiextensions-apiserver
+    ignore:
+      # 0.15 tracks the 0.26 branch
+      - dependency-name: k8s.io/*
+        versions: ">= 0.27.0-alpha.0"
   - package-ecosystem: gomod
     directory: /
     schedule: