elastic / elastic/cloudbeat

[Updatecli] Disable go mod updates

Open
#2,821 1 comment 0 reactions 0 assignees View on GitHub
automation cloudbeat Team:Cloud Security technical debt
Dominant language
Go
Stars
58
Forks
55
Avg merge
9h 9m
Merged PRs (30d)
424

Description

Let's consider disabling go mods update (except beats) from updatecli.

By removing `mods` from here:

https://github.com/elastic/cloudbeat/blob/456e24b2b660510380426621a485f7454ee7ece5/.github/workflows/updatecli.yml#L51

[Dependabot](https://github.com/elastic/cloudbeat/blob/main/.github/dependabot.yml) takes care of that and also groups updates in separate PRs (e.g., trivy, which needs more attention on each update), while with updatecli we have a single PR with multiple mods together ([example](https://github.com/elastic/cloudbeat/pull/2819/files)).

But we need to examine why sometimes dependabot workflow [fails](https://github.com/elastic/cloudbeat/actions/runs/12103193110).

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.