From edd55da1028df8c426348b3130818f9d71ee1b25 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=D2=89=CE=B1k=CE=B1=20x=E2=A0=A0=E2=A0=B5?= <32862241+4k4xs4pH1r3@users.noreply.github.com> Date: Wed, 31 Jan 2024 20:47:59 +0300 Subject: [PATCH] Update dependabot.yml MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: ҉αkα x⠠⠵ <32862241+4k4xs4pH1r3@users.noreply.github.com> --- .github/dependabot.yml | 44 ++++++++++++++++++++++++++++++++++-------- 1 file changed, 36 insertions(+), 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a96dd2571..e33349c84 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,16 +1,44 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + version: 2 +enable-beta-ecosystems: true updates: - - package-ecosystem: "pip" + - package-ecosystem: "pub" # See documentation for possible values. + directory: "" # Location of package manifests + schedule: + interval: "daily" + +updates: + - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + # Check for updates to GitHub Actions every weekday + interval: "daily" - - package-ecosystem: docker - directory: /.devcontainer +updates: + - package-ecosystem: "npm" + directory: "" schedule: - interval: daily + interval: "daily" + # Update the npm manifest file to relax + # the version requirements + versioning-strategy: widen - - package-ecosystem: github-actions - directory: / + - package-ecosystem: "composer" + directory: "" + schedule: + interval: "daily" + # Increase the version requirements for Composer + # only when required + versioning-strategy: increase-if-necessary + + - package-ecosystem: "pip" + directory: "" schedule: - interval: daily + interval: "daily" + # Only allow updates to the lockfile for pip and + # ignore any version updates that affect the manifest + versioning-strategy: lockfile-only