Less frequent, and grouped dependabot updates (#1271)

Monthly may seem like an excaggeration, but our only real dependency is OPA, and we update that anyway. The rest are just peripheral anyway, and security related updates will be suggested immediately regardless. Signed-off-by: Anders Eknert <[email protected]>
StyraInc · Nov 20, 2024 · 6716d37 · 6716d37
1 parent 183584a
commit 6716d37
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,11 +3,15 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "weekly"
   - package-ecosystem: "gomod"
     directory: "/"
     schedule:
-      interval: "daily"
+      interval: "monthly"
     ignore:
       # update OPA manually to bump version in README too
       - dependency-name: "github.com/open-policy-agent/opa"
+    groups:
+      dependencies:
+        patterns:
+          - "*"