dependabot.yaml

version: 2
updates:
  - package-ecosystem: gomod
    directory: /
    labels:
      - dependencies
      - dependencies-go
      - team/triage
      - changelog/no-changelog
    milestone: 22
    ignore:
      # These dependencies are replaced in the main go.mod file.
      # They are ignored since bumping them would have no effect on the build.
      # To update them automatically, it is necessary to remove the `replace` directive.
      - dependency-name: k8s.io/*
      - dependency-name: github.com/grpc-ecosystem/grpc-gateway
      - dependency-name: google.golang.org/grpc
      - dependency-name: github.com/cihub/seelog
      - dependency-name: github.com/containerd/cgroups
      - dependency-name: github.com/containerd/containerd
      - dependency-name: github.com/coreos/go-systemd
      # We only replace github.com/docker/distribution but we ignore all Docker dependencies.
      - dependency-name: github.com/docker/*
      - dependency-name: github.com/florianl/go-conntrack
      - dependency-name: github.com/iovisor/gobpf
      - dependency-name: github.com/lxn/walk
      - dependency-name: github.com/mholt/archiver
      - dependency-name: github.com/prometheus/client_golang
      - dependency-name: github.com/spf13/cast
      - dependency-name: github.com/ugorji/go
      - dependency-name: github.com/DataDog/nikos
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/otlp/model
    labels:
      - dependencies
      - dependencies-go
      - team/agent-platform
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/trace
    labels:
      - dependencies
      - dependencies-go
      - team/agent-apm
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
      # See https://github.com/DataDog/datadog-agent/pull/10112
      - dependency-name: github.com/mailru/easyjson
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/obfuscate
    labels:
      - dependencies
      - dependencies-go
      - team/agent-apm
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
      # See https://github.com/DataDog/datadog-agent/pull/10112
      - dependency-name: github.com/mailru/easyjson
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/quantile
    labels:
      - dependencies
      - dependencies-go
      - team/metrics-aggregation
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /pkg/security/secl
    labels:
      - dependencies
      - dependencies-go
      - team/agent-security
      - changelog/no-changelog
    milestone: 22
    ignore:
      # Ignore internal modules
      - dependency-name: github.com/DataDog/datadog-agent/*
    schedule:
      interval: weekly
    open-pull-requests-limit: 100
  - package-ecosystem: gomod
    directory: /internal/tools
    labels:
      - dependencies
      - dependencies-go
      - dependencies-go-tools # This makes the go_mod_tidy Github Action not run go tools from this
                              # package on Dependabot PRs. Otherwise, a malicious dependency could
                              # publish a new version exploiting that it runs automatically after it
                              # is updated to write to our repo.
      - dev/tooling
      - team/agent-platform
      - changelog/no-changelog
      - qa/skip-qa
    milestone: 22
    schedule:
      interval: monthly
    open-pull-requests-limit: 100
  - package-ecosystem: "pip"
    directory: "/.circleci"
    labels:
      - dependencies
      - python
      - team/agent-platform
      - changelog/no-changelog
      - qa/skip-qa
      - dev/tooling
    milestone: 22
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 100
  - package-ecosystem: "pip"
    directory: "/test/e2e/cws-tests"
    labels:
      - dependencies
      - python
      - team/agent-security
      - changelog/no-changelog
      - qa/skip-qa
      - dev/tooling
    milestone: 22
    schedule:
      interval: "monthly"
    open-pull-requests-limit: 100
  - package-ecosystem: "github-actions"
    directory: "/"
    labels:
      - dependencies
      - dependencies-github-actions
      - team/agent-platform
      - changelog/no-changelog
      - qa/skip-qa
      - dev/tooling
    milestone: 22
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 100