brew/.github/dependabot.yml
Mike McQuaid fca2d8ba40
dependabot: update github-actions weekly.
This should reduce the amount of PR spam we get.

If there's critical vulnerabilities: they will be updated more often.
2025-01-09 12:39:49 +00:00

56 lines
1.0 KiB
YAML

version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
allow:
- dependency-type: all
# The actions in triage-issues.yml are updated in the Homebrew/.github repo
ignore:
- dependency-name: actions/stale
groups:
artifacts:
patterns:
- actions/*-artifact
- package-ecosystem: bundler
directory: /Library/Homebrew
schedule:
interval: daily
allow:
- dependency-type: all
groups:
sorbet:
patterns:
- "sorbet*"
- package-ecosystem: npm
directory: /
schedule:
interval: daily
allow:
- dependency-type: all
- package-ecosystem: docker
directory: /
schedule:
interval: daily
allow:
- dependency-type: all
- package-ecosystem: devcontainers
directory: /
schedule:
interval: daily
allow:
- dependency-type: all
- package-ecosystem: pip
directory: /
schedule:
interval: daily
allow:
- dependency-type: all