From 2b2342413d0cc66943f93c63cb07fbe0da86d336 Mon Sep 17 00:00:00 2001 From: Daniel Blando Date: Wed, 2 Sep 2026 18:04:19 -0700 Subject: [PATCH] Disable Dependabot version updates: bumps come from upstream via sync Set open-pull-requests-limit: 0 on every ecosystem (gomod, docker, github-actions, npm). Independent bumps to upstream-owned files diverge the fork permanently and conflict on every upstream sync. AWS-Change: build AWS-Component: alertmanager Upstream-Status: none --- .github/dependabot.yml | 20 ++++++++++++++++++-- 1 file changed, 18 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 76e3085bab..58413048c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,8 +1,22 @@ +# AWS FORK: Dependabot version updates are disabled here. +# +# This is a fork. Dependency bumps must arrive from upstream through the +# upstream-sync merge, not be applied independently: +# * github-actions bumps to upstream-owned workflows would create a permanent +# fork divergence that conflicts on every sync, for a change we do not own. +# * gomod bumps would rewrite go.mod/go.sum and collide with the `replace` +# pins that wire this fork into the AMP Cortex build. +# +# A zero open-PR limit disables version updates per ecosystem while leaving the +# config valid, so Dependabot raises no config error. Bumps to the fork's own +# workflows (.github/workflows/aws-*.yml, trailer-lint, upstream-sync) are made +# by hand when we want them. + version: 2 updates: - package-ecosystem: "gomod" directory: "/" - open-pull-requests-limit: 20 + open-pull-requests-limit: 0 schedule: interval: "monthly" groups: @@ -14,16 +28,18 @@ updates: patterns: - "go.opentelemetry.io/*" - package-ecosystem: "docker" + open-pull-requests-limit: 0 directory: "/" schedule: interval: "monthly" - package-ecosystem: "github-actions" + open-pull-requests-limit: 0 directory: "/" schedule: interval: "monthly" - package-ecosystem: "npm" directory: "/ui/mantine-ui" - open-pull-requests-limit: 20 + open-pull-requests-limit: 0 schedule: interval: "monthly" groups: