forked from antonnell/networklist-org
-
Notifications
You must be signed in to change notification settings - Fork 161
/
Copy pathdependabot.yml
145 lines (109 loc) · 3.92 KB
/
dependabot.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
#Basic set up for three package managers
version: 2
enable-beta-ecosystems: true
updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
# Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for npm
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for Composer
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for Bundler
- package-ecosystem: "bundler"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for Pip
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for Pub
- package-ecosystem: "pub"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Maintain dependencies for Docker
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "daily"
# Check for npm updates at 9am UTC
time: "01:00"
allow:
# Allow both direct and indirect updates for all packages
- dependency-type: "all"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# for example, `dependabot-npm_and_yarn-next_js-acorn-6.4.1`
separator: "-"
# Use this YAML in your workflow file for each job
# runs-on: self-hosted