567fb680d4
Imho, this is much saner than having so many PRs for all individual dependencies. Taken from osbuild/images. Signed-off-by: Ondřej Budai <ondrej@budai.cz>
26 lines
587 B
YAML
26 lines
587 B
YAML
# Basic test trying dependabot
|
|
|
|
version: 2
|
|
updates:
|
|
|
|
# Maintain dependencies for GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
time: "04:00"
|
|
open-pull-requests-limit: 5
|
|
rebase-strategy: "disabled"
|
|
|
|
# Maintain dependencies for Go
|
|
- package-ecosystem: "gomod"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "daily"
|
|
time: "04:00"
|
|
groups:
|
|
go-deps:
|
|
patterns:
|
|
- "*" # group all dependency updates into one PR
|
|
open-pull-requests-limit: 1
|
|
rebase-strategy: "auto"
|