92ed9d50e9
We have grouped security updates enabled by default at the org level, however when a repo defines its own `dependabot.yml` it will override the org's defaults. We don't currently define any grouping for security updates, hence why we have so many outstanding dependabot PRs. This adds 3 new groups: * A security group, to re-enable grouped security updates. * A docker group, to bump core Docker dependencies like buildx, buildkit, etc. * An "other" group as a catch-all for everything else. AFAICT there's no way to have Dependabot _only_ bump versions for Pulumi & Docker dependencies, so just dump everything else in here. The existing pulumi group stopped receiving updates for some reason but [seems to be working](https://github.com/pulumi/pulumi-docker-build/pull/111) again after I re-opened one of the closed PRs.
Docker-Build Resource Provider
A Pulumi provider for building modern Docker images with buildx and BuildKit.
Not to be confused with the earlier Docker provider, which is still appropriate for managing resources unrelated to building images.
| Provider | Use cases |
|---|---|
@pulumi/docker-build |
Anything related to building images with docker build. |
@pulumi/docker |
Everything else -- including running containers and creating networks. |
Reference
For more information, including examples and migration guidance, please see the Docker-Build provider's detailed API documentation.