Allow k8s.io dependabot tracking on the 0.14/0.15 branches

This ensures we get bug fixes on the appropriate k8s.io branches. There's no point in configuring earlier branches than 0.14, because the versions of k8s.io they track have reached their EOL. We can revisit this if we bump to a supported k8s.io release on those release branches. Signed-off-by: Stephen Kitt <[email protected]>
submariner-io · Jul 31, 2023 · dd56b06 · dd56b06
1 parent 93cb8c6
commit dd56b06
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -25,6 +25,30 @@ updates:
     target-branch: release-0.15
     schedule:
       interval: monthly
+  - package-ecosystem: gomod
+    target-branch: "release-0.14"
+    directory: "/"
+    schedule:
+      interval: weekly
+    allow:
+      # Pick up k8s.io updates
+      - dependency-name: k8s.io/apiextensions-apiserver
+    ignore:
+      # 0.14 tracks the 0.25 branch
+      - dependency-name: k8s.io/*
+        versions: ">= 0.26.0-alpha.0"
+  - package-ecosystem: gomod
+    target-branch: "release-0.15"
+    directory: "/"
+    schedule:
+      interval: weekly
+    allow:
+      # Pick up k8s.io updates
+      - dependency-name: k8s.io/apiextensions-apiserver
+    ignore:
+      # 0.15 tracks the 0.26 branch
+      - dependency-name: k8s.io/*
+        versions: ">= 0.27.0-alpha.0"
   - package-ecosystem: gomod
     directory: /
     schedule: