Update common Prometheus files (#146)
Signed-off-by: prombot <prometheus-team@googlegroups.com>
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5b2345d..57d8410 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,14 +1,44 @@
+###
+# This file is synced from https://github.com/prometheus/prometheus
+###
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "monthly"
- - package-ecosystem: "gomod"
- directory: "/examples/middleware"
+ groups:
+ aws:
+ patterns:
+ - "github.com/aws/*"
+ go.opentelemetry.io:
+ patterns:
+ - "go.opentelemetry.io/*"
+ golang.org-x:
+ patterns:
+ - "golang.org/x/*"
+ k8s.io:
+ patterns:
+ - "k8s.io/*"
+ prometheus:
+ patterns:
+ - "github.com/prometheus/*"
+ - package-ecosystem: "github-actions"
+ directory: "/"
schedule:
interval: "monthly"
- - package-ecosystem: "gomod"
- directory: "/tutorial/whatsup"
- schedule:
- interval: "monthly"
+ groups:
+ promci:
+ patterns:
+ - "prometheus/promci*"
+ codeql:
+ patterns:
+ - "github/codeql-action*"
+ # Exclude configs synced from upstream prometheus/prometheus.
+ exclude-paths:
+ - .github/workflows/approve-workflows.yml
+ - .github/workflows/container_description.yml
+ - .github/workflows/golangci-lint.yml
+ - .github/workflows/govulncheck.yml
+ - .github/workflows/scorecards.yml
+ - .github/workflows/stale.yml
diff --git a/.github/workflows/approve-workflows.yml b/.github/workflows/approve-workflows.yml
new file mode 100644
index 0000000..f372012
--- /dev/null
+++ b/.github/workflows/approve-workflows.yml
@@ -0,0 +1,27 @@
+---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
+name: Approve pending workflows
+
+on:
+ issue_comment:
+ types: [created]
+
+permissions: read-all
+
+jobs:
+ approve:
+ if: >-
+ github.event.issue.pull_request &&
+ github.event.comment.body == '/workflow-approve' &&
+ (github.repository_owner == 'prometheus' || github.repository_owner == 'prometheus-community')
+ runs-on: ubuntu-latest
+ permissions:
+ actions: write
+ contents: read
+ pull-requests: write
+ steps:
+ - uses: prometheus/promci/approve_workflows@370e8c15dcec50043cbe66f2f34633d9efc0a190 # v0.9.0
+ with:
+ github_token: ${{ github.token }}
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 9a5381c..83241e2 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -26,11 +26,11 @@
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- name: Install Go
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+ uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
with:
go-version: 1.26.x
- name: Install snmp_exporter/generator dependencies
@@ -40,7 +40,7 @@
id: golangci-lint-version
run: echo "version=$(make print-golangci-lint-version)" >> $GITHUB_OUTPUT
- name: Lint
- uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
+ uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
with:
args: --verbose
version: ${{ steps.golangci-lint-version.outputs.version }}
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 621476d..374df32 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -1,4 +1,7 @@
---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
name: govulncheck
on:
pull_request:
