Files
spine/.github/dependabot.yml
Thomas Vincent 9ee3e672f7 ci: Rocky Linux 9 build coverage and Dependabot configuration (#550)
Two pieces of CI plumbing, grouped so they are one review rather than
two.

**Rocky Linux 9 job.** EL is the primary deployment platform and nothing
in CI covered it. The job as originally written could never have passed:
`libtirpc-devel` is not in the Rocky 9 default repos, so `dnf install`
aborted the whole transaction and every later step was skipped. Removed
it — the build does not need it. Verified by running the full workflow
body in a `rockylinux:9` container: install, configure, make and check
all pass, 39 warnings.

Image pinned by digest. `set -euo pipefail` added so it satisfies the
workflow policy check in #541. Added a `pull_request` trigger with a
`paths` filter so a change that breaks the EL9 build is caught on the
PR, not on the following Saturday's cron.

**Dependabot.** `github-actions` plus `docker` — the repo has
`Dockerfile`, `Dockerfile.dev` and the snmpd fixture image, none of
which were tracked.

Was #548, folded in here.

**CI hardening added**
- `concurrency` with `cancel-in-progress` — a PR push previously ran the
whole workflow twice and never cancelled stale runs.
- `timeout-minutes: 20` on every job; a hung build otherwise holds a
runner for six hours.
- An ASan/UBSan job. Spine is a threaded network daemon and had no
sanitizer coverage at all.
- `make -j"$(nproc)"` in place of unbounded `make -j`.

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
2026-08-31 09:02:45 +01:00

23 lines
700 B
YAML

version: 2
updates:
- package-ecosystem: github-actions
directory: /
target-branch: develop
schedule: {interval: weekly, day: friday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
github-actions: {patterns: ["*"]}
labels: [dependencies, github-actions]
commit-message: {prefix: ci, include: scope}
- package-ecosystem: docker
directories: ["/", "/tests/snmpv3/snmpd"]
target-branch: develop
schedule: {interval: weekly, day: friday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
docker: {patterns: ["*"]}
labels: [dependencies, docker]
commit-message: {prefix: build, include: scope}