This is an automated email from the ASF dual-hosted git repository.
hubcio pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/iggy.git
The following commit(s) were added to refs/heads/master by this push:
new 448bcbd02 ci: strip registry prefix from docker ignores (#3486)
448bcbd02 is described below
commit 448bcbd02d1ab125c274ce15c0527630f967fc3e
Author: Hubert Gruszecki <[email protected]>
AuthorDate: Mon Jun 15 17:05:39 2026 +0200
ci: strip registry prefix from docker ignores (#3486)
---
.github/dependabot.yml | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2237a8aa5..de2e66fd6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -239,17 +239,22 @@ updates:
cooldown:
default-days: 7
ignore:
+ # Docker dependency-name matching strips the registry prefix, so
+ # MCR images are named by repository path only. A
+ # `mcr.microsoft.com/...` form silently never matches and the bump
+ # leaks through (see closed PRs #3474, #3485).
+ #
# The Python interpreter version is pinned and synced across SDK
# files, CI, and Dockerfiles by
# scripts/ci/sync-python-interpreter-version.sh; a Dependabot bump
# of the base image alone would fail that check.
- dependency-name: "python"
- - dependency-name: "mcr.microsoft.com/devcontainers/python"
+ - dependency-name: "devcontainers/python"
# Go and .NET toolchain base images are pinned deliberately to
# match the versions used across CI and the SDK builds. Bumping
# them is a manual decision, not Dependabot churn.
- dependency-name: "golang"
- - dependency-name: "mcr.microsoft.com/dotnet/sdk"
+ - dependency-name: "dotnet/sdk"
groups:
docker:
patterns:
