Skip to content

Commit ed01253

Browse files
authored
Merge pull request #2457 from shiftstack/envsubst-pin
🌱(deps): pin envsubst
2 parents eec5037 + f2f03ce commit ed01253

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

.github/dependabot.yml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,8 @@ updates:
4848
- dependency-name: "sigs.k8s.io/structured-merge-diff/*"
4949
# For now we deploy CAPI from an unreleased commit
5050
- dependency-name: "sigs.k8s.io/cluster-api*"
51+
# These dependencies are skipped because they require a newer version of go:
52+
- dependency-name: "github.com/a8m/envsubst"
5153
labels:
5254
- "area/dependency"
5355
- "ok-to-test"
@@ -99,6 +101,8 @@ updates:
99101
update-types: ["version-update:semver-major", "version-update:semver-minor"]
100102
# We will need k8s v0.31.3 to bump structured-merge-diff to v4.4.2 (check git history for details).
101103
- dependency-name: "sigs.k8s.io/structured-merge-diff/*"
104+
# These dependencies are skipped because they require a newer version of go:
105+
- dependency-name: "github.com/a8m/envsubst"
102106
labels:
103107
- "area/dependency"
104108
- "ok-to-test"
@@ -151,8 +155,9 @@ updates:
151155
update-types: ["version-update:semver-major", "version-update:semver-minor"]
152156
# We will need k8s v0.31.3 to bump structured-merge-diff to v4.4.2 (check git history for details).
153157
- dependency-name: "sigs.k8s.io/structured-merge-diff/*"
154-
# Newer crypto requires go 1.23
158+
# These dependencies are skipped because they require a newer version of go:
155159
- dependency-name: "golang.org/x/crypto"
160+
- dependency-name: "github.com/a8m/envsubst"
156161
labels:
157162
- "area/dependency"
158163
- "ok-to-test"

0 commit comments

Comments
 (0)