Skip to content

Remove Dependabot docker ecosystem entry - #2838

Open
rajathagasthya wants to merge 1 commit into
NVIDIA:mainfrom
rajathagasthya:remove-dependabot-docker-updates
Open

Remove Dependabot docker ecosystem entry#2838
rajathagasthya wants to merge 1 commit into
NVIDIA:mainfrom
rajathagasthya:remove-dependabot-docker-updates

Conversation

@rajathagasthya

Copy link
Copy Markdown
Contributor

Description

Renovate already manages the base images in docker/Dockerfile and
docker/Dockerfile.devel, and intentionally skips digest-only updates
for builder-stage images. The Dependabot docker entry kept opening
those digest-only PRs (e.g. #2823, #2813) and duplicated distroless/cc
bumps (#2822 vs #2825).

Checklist

  • No secrets, sensitive information, or unrelated changes
  • Lint checks passing (make lint)
  • Generated assets in-sync (make validate-generated-assets)
  • Go mod artifacts in-sync (make validate-modules)
  • Test cases are added for new code paths

Testing

Config-only change to .github/dependabot.yml; no code paths affected.

Renovate already manages the base images in docker/Dockerfile and
docker/Dockerfile.devel, and intentionally skips digest-only updates
for builder-stage images. The Dependabot docker entry kept opening
those digest-only PRs and duplicated distroless/cc bumps.

Signed-off-by: Rajath Agasthya <ragasthya@nvidia.com>
@coderabbitai

coderabbitai Bot commented Aug 31, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: QUIET

Plan: Enterprise

Run ID: 237df388-86e4-47c8-95bf-60d1ae5a9e72

📥 Commits

Reviewing files that changed from the base of the PR and between fa49ea6 and b5c5710.

📒 Files selected for processing (1)
  • .github/dependabot.yml
💤 Files with no reviewable changes (1)
  • .github/dependabot.yml

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.


📝 Walkthrough

Walkthrough

Removed the Dependabot configuration for Docker updates, including its daily schedule and Golang ignore rule. Go module and GitHub Actions update configurations remain unchanged.

Merge Risk: ⚪ Minimal · up to b5c57

This is a localized configuration cleanup that removes duplicate Docker update automation without changing product code or runtime behavior. No actionable merge-blocking risk remains beyond normal checks and review.


Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant