Merge pull request #627 from fluxcd/dependabot-gomod

ci: Enable dependabot `gomod` updates

.github/dependabot.yaml

@@ -1,16 +1,32 @@
 version: 2
 
 updates:
+ - package-ecosystem: "gomod"
+ directory: "/"
+ labels: ["dependencies"]
+ schedule:
+ interval: "daily"
+ groups:
+ go-deps:
+ patterns:
+ - "*"
+ allow:
+ - dependency-type: "direct"
+ ignore:
+ # Kubernetes deps are updated by fluxcd/pkg
+ - dependency-name: "k8s.io/*"
+ - dependency-name: "sigs.k8s.io/*"
+ - dependency-name: "github.com/go-logr/*"
+ # Flux APIs are updated at release time
+ - dependency-name: "github.com/fluxcd/image-automation-controller/api"
+ - dependency-name: "github.com/fluxcd/image-reflector-controller/api"
+ - dependency-name: "github.com/fluxcd/source-controller/api"
  - package-ecosystem: "github-actions"
  directory: "/"
  labels: ["area/ci", "dependencies"]
- schedule:
- # By default, this will be on a monday.
- interval: "weekly"
  groups:
- # Group all updates together, so that they are all applied in a single PR.
- # Grouped updates are currently in beta and is subject to change.
- # xref: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
  ci:
  patterns:
  - "*"
+ schedule:
+ interval: "daily"