Update Dependabot configuration for multiple ecosystems
This commit is contained in:
GitHub
parent
c3941a5158
commit
d822ca3d1b
1 changed files with 191 additions and 0 deletions
191
.github/dependabot.yml
vendored
Normal file
191
.github/dependabot.yml
vendored
Normal file
|
|
@ -0,0 +1,191 @@
|
||||||
|
version: 2
|
||||||
|
multi-ecosystem-groups:
|
||||||
|
uv-ecosystem:
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
|
||||||
|
updates:
|
||||||
|
- package-ecosystem: "bundler"
|
||||||
|
directories:
|
||||||
|
- "/updater"
|
||||||
|
- "/"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
sorbet:
|
||||||
|
patterns:
|
||||||
|
- "*-sorbet"
|
||||||
|
- "sorbet-*"
|
||||||
|
- "sorbet"
|
||||||
|
- "tapioca"
|
||||||
|
aws-sdk:
|
||||||
|
patterns:
|
||||||
|
- "aws-sdk-*"
|
||||||
|
prod-dependencies:
|
||||||
|
dependency-type: "production"
|
||||||
|
update-types:
|
||||||
|
- "minor"
|
||||||
|
- "patch"
|
||||||
|
dev-dependencies:
|
||||||
|
dependency-type: "development"
|
||||||
|
update-types:
|
||||||
|
- "minor"
|
||||||
|
- "patch"
|
||||||
|
|
||||||
|
# Watch the per-ecosystem native helpers
|
||||||
|
- package-ecosystem: "composer"
|
||||||
|
directories:
|
||||||
|
- "/composer/helpers/v2"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
prod-dependencies:
|
||||||
|
dependency-type: "production"
|
||||||
|
update-types:
|
||||||
|
- "minor"
|
||||||
|
- "patch"
|
||||||
|
dev-dependencies:
|
||||||
|
dependency-type: "development"
|
||||||
|
update-types:
|
||||||
|
- "minor"
|
||||||
|
- "patch"
|
||||||
|
- package-ecosystem: "devcontainers"
|
||||||
|
directory: "/"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "docker"
|
||||||
|
directories:
|
||||||
|
- "/"
|
||||||
|
- "/go_modules"
|
||||||
|
- "/cargo"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "github-actions"
|
||||||
|
directory: "/"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
all-actions:
|
||||||
|
patterns: [ "*" ]
|
||||||
|
- package-ecosystem: "gomod"
|
||||||
|
directory: "/go_modules/helpers"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "mix"
|
||||||
|
directory: "/hex/helpers"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "npm"
|
||||||
|
directory: "/npm_and_yarn/helpers"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
npm-dependencies:
|
||||||
|
patterns:
|
||||||
|
- "@npmcli/arborist"
|
||||||
|
- "nock"
|
||||||
|
- "npm"
|
||||||
|
- "semver"
|
||||||
|
exclude-patterns:
|
||||||
|
- "detect-indent" # temp excluded due to https://github.com/dependabot/dependabot-core/pull/5683#issuecomment-1243468605
|
||||||
|
yarn-dependencies:
|
||||||
|
patterns:
|
||||||
|
- "@dependabot/yarn-lib"
|
||||||
|
pnpm-dependencies:
|
||||||
|
patterns:
|
||||||
|
- "@pnpm/lockfile-file"
|
||||||
|
- "@pnpm/dependency-path"
|
||||||
|
dev-dependencies:
|
||||||
|
dependency-type: "development"
|
||||||
|
update-types:
|
||||||
|
- "minor"
|
||||||
|
- "patch"
|
||||||
|
ignore:
|
||||||
|
- dependency-name: "npm"
|
||||||
|
update-types: [ "version-update:semver-major" ]
|
||||||
|
- package-ecosystem: "pip"
|
||||||
|
directory: "/python/helpers"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
common:
|
||||||
|
patterns:
|
||||||
|
- hashin
|
||||||
|
- cython
|
||||||
|
- flake8
|
||||||
|
# Keep the package managers themselves separate because they are higher risk
|
||||||
|
# and also higher visibility--ie, users generally want latest, so we don't
|
||||||
|
# want breakage in the `common` group to prevent updating package manager versions
|
||||||
|
- package-ecosystem: "pub"
|
||||||
|
directory: "/pub/helpers"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "nuget"
|
||||||
|
directory: "/nuget/helpers/lib/NuGetUpdater"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "dotnet-sdk"
|
||||||
|
directory: "/nuget/helpers/lib/NuGetUpdater"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "docker"
|
||||||
|
directory: "/maven"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
- package-ecosystem: "docker"
|
||||||
|
directory: "/uv"
|
||||||
|
multi-ecosystem-group: "uv-ecosystem"
|
||||||
|
patterns: ["*"]
|
||||||
|
- package-ecosystem: "pip"
|
||||||
|
directory: "/uv/helpers"
|
||||||
|
multi-ecosystem-group: "uv-ecosystem"
|
||||||
|
patterns: ["*"]
|
||||||
|
ignore:
|
||||||
|
# Ignore major updates as most major updates will need manual intervention
|
||||||
|
- dependency-name: "*"
|
||||||
|
update-types: [ "version-update:semver-major" ]
|
||||||
|
- package-ecosystem: "docker"
|
||||||
|
directory: "/docker"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
|
groups:
|
||||||
|
regclient:
|
||||||
|
patterns:
|
||||||
|
- "regclient/regctl*"
|
||||||
|
- "sigstore/cosign/cosign*"
|
||||||
|
- package-ecosystem: "docker"
|
||||||
|
directory: "/gradle"
|
||||||
|
schedule:
|
||||||
|
interval: "weekly"
|
||||||
|
day: "sunday"
|
||||||
|
time: "16:00"
|
||||||
Loading…
Add table
Add a link
Reference in a new issue