kube-openapi icon indicating copy to clipboard operation
kube-openapi copied to clipboard

Add dependabot

Open lucacome opened this issue 9 months ago • 1 comments

Adds dependabot to keep Go and GitHub Actions dependencies up to date.

lucacome avatar Apr 30 '24 03:04 lucacome

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: lucacome Once this PR has been reviewed and has the lgtm label, please assign alexzielenski for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot avatar Apr 30 '24 03:04 k8s-ci-robot

/approve /cc @alexzielenski any thoughts on this? I'm fine with adding

Jefftree avatar May 21 '24 02:05 Jefftree

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Jefftree, lucacome

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot avatar May 21 '24 02:05 k8s-ci-robot

/lgtm

Jefftree avatar Jun 20 '24 16:06 Jefftree

oof... this makes kube-openapi proactively bump all dependencies in ways that impact Kubernetes' API surface and makes us unable to actually consume kube-openapi updates. I don't think we want this done globally until we insulate ourselves from API breaks as a result of dependency bumps

xref https://github.com/kubernetes/kubernetes/pull/126787/files#r1727343696

liggitt avatar Aug 22 '24 15:08 liggitt