Skip to content

Commit 28e9aa7

Browse files
jongyouljongyoul
authored
[MINOR] chore(.github): group dependabot security updates by path
### What is this PR for? Group Dependabot security updates by exact path so the current burst of one-off security PRs can be regenerated as grouped PRs instead. This configuration intentionally keeps non-security version updates disabled with `open-pull-requests-limit: 0`, so it only affects grouped security updates and does not start regular version-update PRs for these directories. Covered paths: - `/docs` - `/zeppelin-web` - `/zeppelin-web-angular` - `/dev` - `/` - `/alluxio` - `/bigquery` - `/elasticsearch` - `/flink/flink-scala-2.12` - `/livy` - `/rlang` - `/shell` - `/spark/interpreter` - `/spark/spark-scala-parent` - `/zeppelin-interpreter` - `/zeppelin-plugins/launcher/docker` - `/zeppelin-plugins/launcher/k8s-standard` - `/zeppelin-plugins/notebookrepo/s3` First time? Check out the contributing guide - https://zeppelin.apache.org/contribution/contributions.html ### What type of PR is it? Improvement ### Todos * [x] Add `.github/dependabot.yml` for the targeted directories * [x] Verify the configured directory names match the repository * [x] Expand coverage to the remaining open Dependabot security-update paths * [x] Clarify that the config is intentionally security-updates-only ### What is the Jira issue? None. Minor maintenance change. ### How should this be tested? * Confirm `.github/dependabot.yml` is valid YAML. * Confirm each configured directory exists in the repository. * After merge, verify Dependabot opens grouped security update PRs for the listed paths. ### Screenshots (if appropriate) N/A ### Questions: * Does the license files need to update? No. * Is there breaking changes for older versions? No. * Does this needs documentation? No. Closes #5213 from jongyoul/minor/dependabot-security-groups. Signed-off-by: Jongyoul Lee <jongyoul@gmail.com>
1 parent 16ab7ff commit 28e9aa7

1 file changed

Lines changed: 200 additions & 0 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 200 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,200 @@
1+
version: 2
2+
updates:
3+
# Keep version updates disabled so this config only groups security updates.
4+
- package-ecosystem: "bundler"
5+
directory: "/docs"
6+
schedule:
7+
interval: "weekly"
8+
open-pull-requests-limit: 0
9+
groups:
10+
docs-security-updates:
11+
applies-to: security-updates
12+
patterns:
13+
- "*"
14+
15+
- package-ecosystem: "npm"
16+
directory: "/zeppelin-web"
17+
schedule:
18+
interval: "weekly"
19+
open-pull-requests-limit: 0
20+
groups:
21+
zeppelin-web-security-updates:
22+
applies-to: security-updates
23+
patterns:
24+
- "*"
25+
26+
- package-ecosystem: "npm"
27+
directory: "/zeppelin-web-angular"
28+
schedule:
29+
interval: "weekly"
30+
open-pull-requests-limit: 0
31+
groups:
32+
zeppelin-web-angular-security-updates:
33+
applies-to: security-updates
34+
patterns:
35+
- "*"
36+
37+
- package-ecosystem: "pip"
38+
directory: "/dev"
39+
schedule:
40+
interval: "weekly"
41+
open-pull-requests-limit: 0
42+
groups:
43+
dev-security-updates:
44+
applies-to: security-updates
45+
patterns:
46+
- "*"
47+
48+
- package-ecosystem: "maven"
49+
directory: "/"
50+
schedule:
51+
interval: "weekly"
52+
open-pull-requests-limit: 0
53+
groups:
54+
root-maven-security-updates:
55+
applies-to: security-updates
56+
patterns:
57+
- "*"
58+
59+
- package-ecosystem: "maven"
60+
directory: "/alluxio"
61+
schedule:
62+
interval: "weekly"
63+
open-pull-requests-limit: 0
64+
groups:
65+
alluxio-security-updates:
66+
applies-to: security-updates
67+
patterns:
68+
- "*"
69+
70+
- package-ecosystem: "maven"
71+
directory: "/bigquery"
72+
schedule:
73+
interval: "weekly"
74+
open-pull-requests-limit: 0
75+
groups:
76+
bigquery-security-updates:
77+
applies-to: security-updates
78+
patterns:
79+
- "*"
80+
81+
- package-ecosystem: "maven"
82+
directory: "/elasticsearch"
83+
schedule:
84+
interval: "weekly"
85+
open-pull-requests-limit: 0
86+
groups:
87+
elasticsearch-security-updates:
88+
applies-to: security-updates
89+
patterns:
90+
- "*"
91+
92+
- package-ecosystem: "maven"
93+
directory: "/flink/flink-scala-2.12"
94+
schedule:
95+
interval: "weekly"
96+
open-pull-requests-limit: 0
97+
groups:
98+
flink-scala-security-updates:
99+
applies-to: security-updates
100+
patterns:
101+
- "*"
102+
103+
- package-ecosystem: "maven"
104+
directory: "/livy"
105+
schedule:
106+
interval: "weekly"
107+
open-pull-requests-limit: 0
108+
groups:
109+
livy-security-updates:
110+
applies-to: security-updates
111+
patterns:
112+
- "*"
113+
114+
- package-ecosystem: "maven"
115+
directory: "/rlang"
116+
schedule:
117+
interval: "weekly"
118+
open-pull-requests-limit: 0
119+
groups:
120+
rlang-security-updates:
121+
applies-to: security-updates
122+
patterns:
123+
- "*"
124+
125+
- package-ecosystem: "maven"
126+
directory: "/shell"
127+
schedule:
128+
interval: "weekly"
129+
open-pull-requests-limit: 0
130+
groups:
131+
shell-security-updates:
132+
applies-to: security-updates
133+
patterns:
134+
- "*"
135+
136+
- package-ecosystem: "maven"
137+
directory: "/spark/interpreter"
138+
schedule:
139+
interval: "weekly"
140+
open-pull-requests-limit: 0
141+
groups:
142+
spark-interpreter-security-updates:
143+
applies-to: security-updates
144+
patterns:
145+
- "*"
146+
147+
- package-ecosystem: "maven"
148+
directory: "/spark/spark-scala-parent"
149+
schedule:
150+
interval: "weekly"
151+
open-pull-requests-limit: 0
152+
groups:
153+
spark-scala-parent-security-updates:
154+
applies-to: security-updates
155+
patterns:
156+
- "*"
157+
158+
- package-ecosystem: "maven"
159+
directory: "/zeppelin-interpreter"
160+
schedule:
161+
interval: "weekly"
162+
open-pull-requests-limit: 0
163+
groups:
164+
zeppelin-interpreter-security-updates:
165+
applies-to: security-updates
166+
patterns:
167+
- "*"
168+
169+
- package-ecosystem: "maven"
170+
directory: "/zeppelin-plugins/launcher/docker"
171+
schedule:
172+
interval: "weekly"
173+
open-pull-requests-limit: 0
174+
groups:
175+
launcher-docker-security-updates:
176+
applies-to: security-updates
177+
patterns:
178+
- "*"
179+
180+
- package-ecosystem: "maven"
181+
directory: "/zeppelin-plugins/launcher/k8s-standard"
182+
schedule:
183+
interval: "weekly"
184+
open-pull-requests-limit: 0
185+
groups:
186+
launcher-k8s-standard-security-updates:
187+
applies-to: security-updates
188+
patterns:
189+
- "*"
190+
191+
- package-ecosystem: "maven"
192+
directory: "/zeppelin-plugins/notebookrepo/s3"
193+
schedule:
194+
interval: "weekly"
195+
open-pull-requests-limit: 0
196+
groups:
197+
notebookrepo-s3-security-updates:
198+
applies-to: security-updates
199+
patterns:
200+
- "*"

0 commit comments

Comments
 (0)