dependabot: ingore OPA updates (#3334)

MustafaSaber · web-flow · commit d8d1bbf249cf · 2024-12-06T15:42:19.000+01:00
We decided to ignore automatically updating OPA dependencies. It was already done in #3332 (comment) & #3320 (comment) This PR is to add visibility and we will run `@dependabot unignore ...` after merging. See [`ignore` docs](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) Signed-off-by: Mustafa Abdelrahman <mustafa.abdelrahman@zalando.de>
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -13,6 +13,9 @@ updates:
       all-go-mod-patch-and-minor:
         patterns: ["*"]
         update-types: ["patch", "minor"]
+    ignore:
+      - dependency-name: "github.com/open-policy-agent/opa"
+      - dependency-name: "github.com/open-policy-agent/opa-envoy-plugin"
   - package-ecosystem: "github-actions"
     directory: "/" # For GitHub Actions, set the directory to / to check for workflow files in .github/workflows
     schedule:
