build: Set up Dependabot for go security updates (#35499)

1 year ago · b676aeb694
parent bb476a311e
commit b676aeb694
1 changed files with 10 additions and 0 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -1,5 +1,15 @@
 version: 2
 updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+      - go
+      - security
+    # Disable regular version updates and only use Dependabot for security updates
+    open-pull-requests-limit: 0
  - package-ecosystem: github-actions
    directory: /
    schedule: