From 4ca3afb3203a215e70cb867b8dc8ab3626c55e17 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bartosz=20Pacho=C5=82ek?= Date: Mon, 28 Sep 2026 09:44:18 +0200 Subject: [PATCH] Dependabot: patch updates only for the golang build image The golang image in both Dockerfiles follows the toolchain go.mod pins, which CI, the unit tests, govulncheck and the GoReleaser archives use. #160 moved only the Docker builds to Go 1.27.1, which would have shipped a toolchain that only the functional suite exercises. A Go minor is a deliberate move across go.mod, both Dockerfiles and golangci-lint, so Dependabot now proposes golang patch updates only. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9f83eb9..1dd6641 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -93,6 +93,15 @@ updates: - docker commit-message: prefix: deps(docker) + ignore: + # The golang build image follows the toolchain go.mod pins, which CI, + # the tests, govulncheck and the release archives use. A new Go minor + # is a deliberate move across go.mod, both Dockerfiles and + # golangci-lint, so only patch updates are proposed here (#160). + - dependency-name: golang + update-types: + - version-update:semver-major + - version-update:semver-minor groups: docker-minor-and-patch: applies-to: version-updates