This is an automated email from the ASF dual-hosted git repository.
jason810496 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new f6c19e476db Stop Dependabot from raising Go SDK PRs against v3-3-test
(#71223)
f6c19e476db is described below
commit f6c19e476dbcef03ca4ad118da3b0585590f79aa
Author: Jason(Zhe-You) Liu <[email protected]>
AuthorDate: Thu Aug 6 18:32:02 2026 +0800
Stop Dependabot from raising Go SDK PRs against v3-3-test (#71223)
---
.github/dependabot.yml | 34 ++++++++++++++--------------------
1 file changed, 14 insertions(+), 20 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bf1954690b1..7aa3d8d6e2e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -371,26 +371,6 @@ updates:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
- - package-ecosystem: "gomod"
- cooldown:
- # Longer than other ecosystems: distributed Go releases are not
pre-scanned by a
- # central registry, so we give any malicious release more time to be
flagged.
- default-days: 14
- directory: "/go-sdk"
- schedule:
- interval: "weekly"
- target-branch: v3-3-test
- groups:
- 3-3-go-sdk-dependency-updates:
- patterns:
- - "*"
- update-types:
- - "minor"
- - "patch"
- ignore:
- - dependency-name: "*"
- update-types: ["version-update:semver-major"]
-
- package-ecosystem: "uv"
cooldown:
default-days: 4
@@ -425,3 +405,17 @@ updates:
patterns:
- "*"
applies-to: security-updates
+
+ - package-ecosystem: "gomod"
+ cooldown:
+ default-days: 14
+ directory: "/go-sdk"
+ schedule:
+ interval: "weekly"
+ target-branch: v3-3-test
+ open-pull-requests-limit: 0
+ groups:
+ 3-3-go-sdk-security-updates:
+ patterns:
+ - "*"
+ applies-to: security-updates
