dragonfly/.github/dependabot.yml
Blanky 43060ba79e
chore(dependabot): Allows only security patches (#4075)
* feat(dependabot): Add dependabot to check for vulnerabilies and update dependencies

---------

Signed-off-by: BLANKatGITHUB <131886247+BLANKatGITHUB@users.noreply.github.com>
Signed-off-by: Blanky <131886247+BLANKatGITHUB@users.noreply.github.com>
2024-11-08 08:08:33 +02:00

59 lines
1.4 KiB
YAML

version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
open-pull-requests-limit: 1
groups:
actions:
patterns:
- "*"
- package-ecosystem: "gomod"
directories:
- "/contrib/charts/dragonfly"
- "/tools/replay"
schedule:
interval: "weekly"
open-pull-requests-limit: 1
#uncomment it to group dependency updates
#groups:
#go-mod:
#patterns:
#- "*"
ignore:
# Disable all updates except security updates
#remove an item from ignore list to get dependency updates of that kind
- dependency-name: "*"
update-types:
- "version-update:semver-major"
- "version-update:semver-minor"
- "version-update:semver-patch"
- package-ecosystem: "pip"
directories:
- "/tests/dragonfly"
- "/tools"
schedule:
interval: "weekly"
#uncomment it to group dependency updates
#groups:
#py-dep:
#patterns:
#- "*"
ignore:
# Disable all updates except security updates
#remove an item from ignore list to get dependency updates of that kind
- dependency-name: "*"
update-types:
- "version-update:semver-major"
- "version-update:semver-minor"
- "version-update:semver-patch"