Merge pull request #1052 from fluxcd/dependabot-gomod

ci: Enable gomod updates

.github/dependabot.yaml

@@ -1,16 +1,37 @@
 version: 2
 
 updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    labels: ["dependencies"]
+    schedule:
+      interval: "daily"
+    groups:
+      flux-deps:
+        patterns:
+          - "github.com/fluxcd/*"
+      go-deps:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "github.com/fluxcd/*"
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      # Kubernetes deps are updated by fluxcd/pkg
+      - dependency-name: "k8s.io/*"
+      - dependency-name: "sigs.k8s.io/*"
+      # Cloud SDKs are updated by SOPS
+      - dependency-name: "github.com/Azure/*"
+      - dependency-name: "github.com/aws/*"
+      # Ignore API pkg, since it's not bumped at release time
+      - dependency-name: "github.com/fluxcd/kustomize-controller/api"
   - package-ecosystem: "github-actions"
     directory: "/"
     labels: ["area/ci", "dependencies"]
     groups:
-      # Group all updates together, so that they are all applied in a single PR.
-      # Grouped updates are currently in beta and is subject to change.
-      # xref: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
       ci:
         patterns:
           - "*"
     schedule:
-      # By default, this will be on a monday.
-      interval: "weekly"
+      interval: "daily"