cloudbeat
cloudbeat copied to clipboard
[Updatecli] Disable go mod updates
Let's consider disabling go mods update (except beats) from updatecli.
By removing mods from here:
https://github.com/elastic/cloudbeat/blob/456e24b2b660510380426621a485f7454ee7ece5/.github/workflows/updatecli.yml#L51
Dependabot takes care of that and also groups updates in separate PRs (e.g., trivy, which needs more attention on each update), while with updatecli we have a single PR with multiple mods together (example).
But we need to examine why sometimes dependabot workflow fails.
Counter-proposal: migrate to renovate, used across Elastic.