dependabot.yml

---
version: 2
updates:
  - package-ecosystem: gomod
    directory: /
    schedule:
      interval: daily
    labels:
      - automation
      - dependabot
    allow:
      # Team:Elastic-Agent-Data-Plane
      - dependency-name: github.com/elastic/elastic-agent-autodiscover
      - dependency-name: github.com/elastic/elastic-agent-client/*
      - dependency-name: github.com/elastic/elastic-agent-libs
      - dependency-name: github.com/elastic/elastic-agent-shipper-client
      - dependency-name: github.com/elastic/elastic-agent-system-metrics
      - dependency-name: github.com/elastic/go-concert
      - dependency-name: github.com/elastic/go-elasticsearch/*
      - dependency-name: github.com/elastic/go-licenser
      - dependency-name: github.com/elastic/go-lookslike
      - dependency-name: github.com/elastic/go-lumber
      - dependency-name: github.com/elastic/go-structform
      - dependency-name: github.com/elastic/go-sysinfo
      - dependency-name: github.com/elastic/go-ucfg
      - dependency-name: github.com/elastic/gosigar
      - dependency-name: go.elastic.co/apm/*
      - dependency-name: go.elastic.co/ecszap
      - dependency-name: go.elastic.co/go-licence-detector
      # Team:Service-Integrations
      - dependency-name: github.com/elastic/bayeux
      # Team:Security-Linux Platform
      - dependency-name: github.com/elastic/go-libaudit/*
      - dependency-name: github.com/elastic/go-perf
      - dependency-name: github.com/elastic/go-seccomp-bpf
      - dependency-name: github.com/elastic/toutoumomoma
      - dependency-name: github.com/elastic/ebpfevents
    ignore:
      # Skip github.com/elastic/mito because it requires documentation updates.
      - dependency-name: github.com/elastic/mito
    open-pull-requests-limit: 2

  # Cloud providers' SDK dependencies
  - package-ecosystem: "gomod"
    directory: "/"
    schedule:
      interval: "daily"
    labels:
      - automation
      - dependabot
    reviewers:
      - "elastic/obs-ds-hosted-services"
      - "elastic/obs-infraobs-integrations"
    groups:
      azure-sdks:
        patterns:
          - "github.com/Azure/azure-sdk-for-go/*"
          - "github.com/Azure/azure-event-hubs-go/*"
          - "github.com/Azure/go-autorest/*"
          - "github.com/Azure/azure-storage-blob-go/*"
      gcp-sdks:
        patterns:
          - "cloud.google.com/go/*"
          - "google.golang.org/*"

  # GitHub actions
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "sunday"
      time: "22:00"
    labels:
      - automation
      - dependabot
    groups:
      github-actions:
        patterns:
          - "*"
    open-pull-requests-limit: 5