Remove Dependabot docker ecosystem entry - #2838
Conversation
Renovate already manages the base images in docker/Dockerfile and docker/Dockerfile.devel, and intentionally skips digest-only updates for builder-stage images. The Dependabot docker entry kept opening those digest-only PRs and duplicated distroless/cc bumps. Signed-off-by: Rajath Agasthya <ragasthya@nvidia.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: QUIET Plan: Enterprise Run ID: 📒 Files selected for processing (1)
💤 Files with no reviewable changes (1)
Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review. 📝 WalkthroughWalkthroughRemoved the Dependabot configuration for Docker updates, including its daily schedule and Golang ignore rule. Go module and GitHub Actions update configurations remain unchanged. Merge Risk: ⚪ Minimal · up to This is a localized configuration cleanup that removes duplicate Docker update automation without changing product code or runtime behavior. No actionable merge-blocking risk remains beyond normal checks and review. Comment |
Description
Renovate already manages the base images in docker/Dockerfile and
docker/Dockerfile.devel, and intentionally skips digest-only updates
for builder-stage images. The Dependabot docker entry kept opening
those digest-only PRs (e.g. #2823, #2813) and duplicated distroless/cc
bumps (#2822 vs #2825).
Checklist
make lint)make validate-generated-assets)make validate-modules)Testing
Config-only change to .github/dependabot.yml; no code paths affected.