From da55ab78ac92a45fff12e3eb65162d92ae8b7419 Mon Sep 17 00:00:00 2001 From: Daniel Vystrcil Date: Sat, 15 Aug 2026 12:10:09 -0700 Subject: [PATCH] chore: replace dependabot with renovate MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Operator decision: one dependency tool for the platform unless the second can do something the first cannot. dependabot.yml here covered github-actions and docker. config:recommended enables both managers, so coverage is unchanged — the Dockerfile and .github/workflows/build.yaml are still watched. Renovate is the platform standard because its dependency surface is mostly things dependabot cannot see: 21 ArgoCD Helm chart pins and 11 kustomization newTag fields, none of which dependabot supports. --- .github/dependabot.yml | 16 ---------------- 1 file changed, 16 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index ef937e6..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,16 +0,0 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - -version: 2 -updates: -- package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly" - -- package-ecosystem: "docker" - directory: "/" - schedule: - interval: "weekly"