Skip to content

Commit a8a7216

Browse files
committed
Configure renovate gomod every 3 months
We use dependabot as our main tool for keeping up-to-date deps. Just keep renovate as a catch up net. We choose to use dependabot as it provides correlation with related CVEs, and because renovate too often fails to update go.mod (leaving raw digests in the file)
1 parent 84f0464 commit a8a7216

File tree

1 file changed

+1
-8
lines changed

1 file changed

+1
-8
lines changed

renovate.json

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,7 @@
55
],
66
"labels": ["dependencies"],
77
"gomod": {
8-
"schedule": [
9-
"after 8am on monday"
10-
],
8+
"schedule": ["* * 7 */3 *"],
119
"postUpdateOptions": [
1210
"gomodUpdateImportPaths",
1311
"gomodTidy",
@@ -17,11 +15,6 @@
1715
{
1816
"matchManagers": ["gomod"],
1917
"groupName": "Go modules"
20-
},
21-
{
22-
"matchManagers": ["gomod"],
23-
"matchUpdateTypes": ["major"],
24-
"enabled": false
2518
}
2619
]
2720
},

0 commit comments

Comments
 (0)