wehub-resource-sync
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
# Basic dependabot.yml file with
|
|
# minimum configuration for two package managers
|
|
|
|
version: 2
|
|
updates:
|
|
# Enable version updates for python
|
|
- package-ecosystem: "pip"
|
|
# Look for a `requirements` in the `root` directory
|
|
directory: "/"
|
|
# Check for updates once a week
|
|
schedule:
|
|
interval: "monthly"
|
|
# Labels on pull requests for version updates only
|
|
labels:
|
|
- "dependencies"
|
|
pull-request-branch-name:
|
|
# Separate sections of the branch name with a hyphen
|
|
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
|
|
separator: "-"
|
|
# Allow up to 5 open pull requests for pip dependencies
|
|
open-pull-requests-limit: 3
|
|
|
|
# Enable version updates for GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
# Check for updates once a week
|
|
schedule:
|
|
interval: "weekly"
|
|
# Labels on pull requests for version updates only
|
|
labels:
|
|
- "CI / actions"
|
|
pull-request-branch-name:
|
|
# Separate sections of the branch name with a hyphen
|
|
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
|
|
separator: "-"
|
|
# Allow up to 5 open pull requests for GitHub Actions
|
|
open-pull-requests-limit: 1
|
|
groups:
|
|
GHA-updates:
|
|
patterns:
|
|
- "*"
|