cloudbeat icon indicating copy to clipboard operation
cloudbeat copied to clipboard

[Updatecli] Disable go mod updates

Open moukoublen opened this issue 1 year ago • 1 comments

Let's consider disabling go mods update (except beats) from updatecli.

By removing mods from here:

https://github.com/elastic/cloudbeat/blob/456e24b2b660510380426621a485f7454ee7ece5/.github/workflows/updatecli.yml#L51

Dependabot takes care of that and also groups updates in separate PRs (e.g., trivy, which needs more attention on each update), while with updatecli we have a single PR with multiple mods together (example).

But we need to examine why sometimes dependabot workflow fails.

moukoublen avatar Dec 09 '24 09:12 moukoublen

Counter-proposal: migrate to renovate, used across Elastic.

orestisfl avatar Dec 09 '24 09:12 orestisfl