Skip to content

chore(github): dependabot ignore some actions and Go modules #1527

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
May 15, 2025

Conversation

qdm12
Copy link
Collaborator

@qdm12 qdm12 commented Mar 27, 2025

Why this should be merged

Dependabot currently spams us with Go modules upgrades, which we need to handle manually/through a geth sync anyway, as well as with incompatible Github actions updates.

How this works

  • Ignore specific versions of golangci-lint-action versions only supporting golangci-lint v2.x.x which we can't support
  • Ignore avalanchego Github action updates (do this manually)
  • Ignore avalanchego and libevm Go module updates (do this manually instead)
  • Ignore untouched geth Go modules to stay aligned with geth code

How this was tested

Need to be documented?

Need to update RELEASES.md?

@qdm12 qdm12 force-pushed the qdm12/github/dependabot-actions-only branch from a1aae3d to 94af8ee Compare May 13, 2025 17:55
@qdm12 qdm12 changed the title chore(github): change dependabot to monitor actions not Go modules chore(github): dependabot ignore some actions and Go modules May 13, 2025
@qdm12 qdm12 added this pull request to the merge queue May 15, 2025
Merged via the queue into master with commit 9dc0390 May 15, 2025
14 checks passed
@qdm12 qdm12 deleted the qdm12/github/dependabot-actions-only branch May 15, 2025 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants