From 9422acad097dded741c8e6929b847cde73978b01 Mon Sep 17 00:00:00 2001 From: Fabiana Campanari Date: Thu, 29 Feb 2024 19:10:09 -0300 Subject: [PATCH] dependabot.yml Signed-off-by: Fabiana Campanari --- .github/dependabot.yml | 125 +++++++++++++++++++++++++++++++++++++++-- 1 file changed, 119 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c77d007..6123bed 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,12 +1,125 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: - - package-ecosystem: "" # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: "bundler" + directory: "/updater" schedule: interval: "weekly" + day: "sunday" + time: "16:00" + groups: + aws-sdk: + patterns: + - "aws-sdk-*" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + + # Watch the per-ecosystem native helpers + - package-ecosystem: "composer" + directory: "/composer/helpers/v1" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + - package-ecosystem: "composer" + directory: "/composer/helpers/v2" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "docker" + directory: "/go_modules" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "gomod" + directory: "/go_modules/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "mix" + directory: "/hex/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "npm" + directory: "/npm_and_yarn/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + npm-dependencies: + patterns: + - "@npmcli/arborist" + - "nock" + - "npm" + - "semver" + exclude-patterns: + - "detect-indent" # temp excluded due to https://github.com/dependabot/dependabot-core/pull/5683#issuecomment-1243468605 + yarn-dependencies: + patterns: + - "@dependabot/yarn-lib" + pnpm-dependencies: + patterns: + - "@pnpm/lockfile-file" + - "@pnpm/dependency-path" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + ignore: + - dependency-name: "npm" + update-types: ["version-update:semver-major"] + - package-ecosystem: "pip" + directory: "/python/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "pub" + directory: "/pub/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + + + + + + + +