Skip to content

Add a Dependabot config for Go module updates - #1054

Open
liusc28 wants to merge 1 commit into
masterfrom
dependabot-config
Open

liusc28 wants to merge 1 commit into
masterfrom
dependabot-config

Conversation

@liusc28

@liusc28 liusc28 commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

Dependabot opens a weekly PR that groups all minor and patch updates of the Go modules in go.mod, and separate PRs for major updates. These are the modules that end up in the release images (config manager, bootstrap, start-up binary, gcsrunner).

A release is proposed only after it has been out for 14 days, so that broken or malicious releases have time to be caught. This delay does not apply to security updates.

The Bazel dependencies in WORKSPACE are left out on purpose: an Envoy upgrade needs code changes and is done by hand.

Dependabot opens a weekly PR that groups all minor and patch updates of
the Go modules in go.mod, and separate PRs for major updates. These are
the modules that end up in the release images (config manager,
bootstrap, start-up binary, gcsrunner).

A release is proposed only after it has been out for 14 days, so that
broken or malicious releases have time to be caught. This delay does
not apply to security updates.

The Bazel dependencies in WORKSPACE are left out on purpose: an Envoy
upgrade needs code changes and is done by hand.
@liusc28

liusc28 commented Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

/cc @leon-gg @TigerSunWork

@liusc28

liusc28 commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

/retest

@google-oss-prow

Copy link
Copy Markdown

@liusc28: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ESPv2-presubmit-tsan c7a0254 link true /test ESPv2-presubmit-tsan
ESPv2-cloud-run-e2e-app-engine-http-bookstore c7a0254 link true /test ESPv2-cloud-run-e2e-app-engine-http-bookstore
ESPv2-anthos-cloud-run-e2e-anthos-cloud-run-http-bookstore c7a0254 link true /test ESPv2-anthos-cloud-run-e2e-anthos-cloud-run-http-bookstore
ESPv2-presubmit-asan c7a0254 link true /test ESPv2-presubmit-asan
Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@google-oss-prow

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: leon-gg, liusc28, TigerSunWork

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants