From f88b8a5d6b1433692276543162d8d1336b54e092 Mon Sep 17 00:00:00 2001 From: Eric Fu Date: Wed, 30 Oct 2024 15:47:41 +0800 Subject: [PATCH 1/2] enable dependabot for java code --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0523e534c5d8a..9871e8dec0174 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -39,6 +39,13 @@ updates: google-cloud: patterns: - "google-cloud*" +- package-ecosystem: maven + directory: /java + schedule: + interval: "daily" + open-pull-requests-limit: 10 + rebase-strategy: "disabled" + # Don't update these directories - package-ecosystem: cargo directory: /integration_tests/feature-store From e9355c5a9d3d94d9834e163590ed7bf11ac15c5f Mon Sep 17 00:00:00 2001 From: Eric Fu Date: Wed, 30 Oct 2024 17:57:58 +0800 Subject: [PATCH 2/2] ignore debezium --- .github/dependabot.yml | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9871e8dec0174..3ee3bea8bbabf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -39,12 +39,6 @@ updates: google-cloud: patterns: - "google-cloud*" -- package-ecosystem: maven - directory: /java - schedule: - interval: "daily" - open-pull-requests-limit: 10 - rebase-strategy: "disabled" # Don't update these directories - package-ecosystem: cargo @@ -53,3 +47,21 @@ updates: interval: "daily" ignore: - dependency-name: "*" + +- package-ecosystem: maven + directory: /java + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + # Disable auto rebase to reduce cost. Use `@dependabot rebase` manually instead. + rebase-strategy: "disabled" + ignore: + # Do not bump Debezium because we have hacked its source code e.g. #18760 + - dependency-name: "io.debezium:*" + update-types: + ["version-update:semver-minor", "version-update:semver-major"] + groups: + # Group all dependenies together because Java libraries are quite stable + all: + patterns: + - "*"