packer/.github/dependabot.yml
Wilken Rivera 06653b98c0
Update allowed dependencies to track (#12355)
* Packer plugins rely on the Packer SDK for the majority of its HCL
dependency. To prevent issues with the version of go-cty or hcl/v2 pkg
getting out of sync this changes sets the allowed dependency to
packer-plugin-sdk only.

* HashiCorp is standardizing on pinning versions of allowed GitHub actions to prevent
the introduction of potential security issues. This change removes GitHub actions
from dependabot.
2023-04-07 13:44:26 -04:00

9 lines
224 B
YAML

version: 2
updates:
- package-ecosystem: gomod
directory: /
schedule:
interval: daily
allow:
- dependency-name: "github.com/hashicorp/packer-plugin-sdk"
- dependency-name: "github.com/hashicorp/hcp-sdk-go"