mirror of
https://github.com/anchore/syft.git
synced 2026-10-11 21:57:22 +02:00
Alex Goodman
c00be184b5
* fix: revert hashstructure to v0.6.0 to keep artifact IDs stable hashstructure v1 changed `SlicesAsSets` hashing (every slice now gets a finalizing hash pass, and duplicate elements are deduplicated), which changed nearly every artifact ID syft produces. - pin `github.com/gohugoio/hashstructure` back to v0.6.0 and have dependabot ignore major bumps - make the aggregate `Unit tests` job fail when a dependency fails; previously it was skipped, which satisfies the required check and let #5277 auto-merge with failing unit tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * ci: fail unit test gate on any failed, cancelled, or skipped dependency Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * ci: require every unit test dependency to succeed Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
40 lines
1019 B
YAML
40 lines
1019 B
YAML
# Dependabot configuration
|
|
|
|
version: 2
|
|
|
|
updates:
|
|
|
|
- package-ecosystem: gomod
|
|
directories:
|
|
- "/"
|
|
- "/.make"
|
|
cooldown:
|
|
default-days: 7
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- "dependencies"
|
|
ignore:
|
|
- dependency-name: "github.com/aquasecurity/go-pep440-version"
|
|
- dependency-name: "github.com/aquasecurity/go-version"
|
|
- dependency-name: "github.com/knqyf263/go-apk-version"
|
|
- dependency-name: "github.com/knqyf263/go-deb-version"
|
|
# v1 changed SlicesAsSets hashing, which changes every artifact ID syft produces
|
|
- dependency-name: "github.com/gohugoio/hashstructure"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directories:
|
|
- "/"
|
|
- "/.github/actions/*"
|
|
cooldown:
|
|
default-days: 7
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- "dependencies"
|