Add dependabot to the kubernetes-client organization.

[brendandburns]

Organization or repository

kubernetes-client/javascript

Name of integration

dependabot

Link to integration website

https://github.com/marketplace/dependabot-preview

Describe what is attempting to be accomplished

Dependabot automatically sends PRs for updates to dependencies due to security issues.

Additional context for request

N/A

Thanks!

[cblecker]

Hey @brendandburns! I've been investigating this.. GitHub now integrates dependabot right into your repo settings, but there have been two issues in testing:

• It opens branches directly on your repo (not a fork), so these new branches get protected by prow
• The bot doesn't have a CLA signed, so it gets blocked on the CLA context

We're working on both of these, and I'll let you know when we make progress

/assign

[brendandburns]

@cblecker Thanks, I'm happy to guinea pig test anything you need, this will save us a bunch of time.

[cblecker]

One puzzle piece is in place: kubernetes/test-infra#13016

This will allow is to exempt these branches from protection, so we can clean them up.

[yue9944882]

a polite bump, any updates in this thread?

[cblecker]

I opened a PR earlier today (kubernetes/test-infra#13445) to get the regex in place. Still need to figure out the CLA stuff though.

[cblecker]

Poked CLA issue again: cncf/foundation#3 (comment)

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[cblecker]

/remove-lifecycle stale

[shu-mutou]

kubernetes/dashboard repo also uses dependabot and faces same problem.

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[nikhita]

/remove-lifecycle stale

[cblecker]

This is now enabled and is functional on https://github.com/kubernetes-client/javascript/network/alerts

/close

[k8s-ci-robot]

@cblecker: Closing this issue.

In response to this:

This is now enabled and is functional on https://github.com/kubernetes-client/javascript/network/alerts

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.