Skip to content

Commit

Permalink
added dependabot.yml for version updates (#31)
Browse files Browse the repository at this point in the history
What
Adding base config for dependabot.yml, which enables automatic PRs for dependency version updates through Dependabot. This base config sets version updates to run on a weekly schedule, groups PRs for version updates according to major vs minor/patch updates, and sets max PRs that Dependabot can create for version updates per package-ecosystem.

Why
To enable using the latest package versions, and provide a way to customize Dependabot security updates PRs.
  • Loading branch information
kanwalpreetd authored Oct 3, 2024
1 parent 35437b3 commit a28c7bb
Showing 1 changed file with 41 additions and 0 deletions.
41 changes: 41 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
version: 2
updates:
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "weekly"
day: "sunday"
time: "02:00"
open-pull-requests-limit: 2
groups:
minor-and-patch:
applies-to: version-updates
update-types:
- "patch"
- "minor"
major:
applies-to: version-updates
update-types:
- "major"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "sunday"
time: "02:00"
open-pull-requests-limit: 2
groups:
all-actions:
applies-to: version-updates
patterns: [ "*" ]
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "weekly"
day: "sunday"
time: "02:00"
open-pull-requests-limit: 2
groups:
all-docker:
applies-to: version-updates
patterns: [ "*" ]

0 comments on commit a28c7bb

Please sign in to comment.