Skip to content

chore: disable major Go dependency updates in Renovate#94

Open
carole-lavillonniere wants to merge 1 commit intolocalstackfrom
chore/disable-major-go-deps-renovate
Open

chore: disable major Go dependency updates in Renovate#94
carole-lavillonniere wants to merge 1 commit intolocalstackfrom
chore/disable-major-go-deps-renovate

Conversation

@carole-lavillonniere
Copy link
Copy Markdown

Summary

  • Disables Renovate PRs for major Go module version bumps

Context

Major Go module upgrades require changing import paths throughout the source code (e.g. github.com/go-chi/chigithub.com/go-chi/chi/v5), which Renovate cannot do automatically. The resulting PRs only update go.mod/go.sum but leave the source code on the old import paths, making them incomplete and misleading (e.g. #86).

Disabling these makes major upgrades an intentional manual process, which they have to be anyway.

Major Go module version bumps require import path changes throughout the
source code, which Renovate cannot do automatically. Disable these PRs
to avoid noise from incomplete updates.
"matchManagers": ["gomod"],
"excludePackageNames": ["go"],
"matchUpdateTypes": ["major"],
"groupName": "Go dependencies (major)"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: I guess we could keep the groupName if we want to toggle it back (in case CVE handling requires it)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants