robojerk/codeql-action

Merge pull request #1413 from github/update-dependabot-e0f8a3c2

Browse source 
Add Dependabot config file
This commit is contained in:
Henry Mercer 2022-12-02 19:28:32 +00:00 • committed by GitHub
commit 62b14cbbad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

21
.github/dependabot.yml vendored
View file

@ -1,20 +1,17 @@
version: 2 version: 2
updates: updates:
- package-ecosystem: "npm" - package-ecosystem: npm
directory: "/" directory: "/"
schedule: schedule:
interval: "weekly" interval: weekly
day: "thursday" # Gives us a working day to merge this before our typical release
labels: labels:
- "Update dependencies" - Update dependencies
ignore: ignore:
- dependency-name: "*" - dependency-name: "*"
update-types: ["version-update:semver-minor", "version-update:semver-patch"] update-types:
- package-ecosystem: "npm" - version-update:semver-minor
directory: "/runner" - version-update:semver-patch
- package-ecosystem: github-actions
directory: "/"
schedule: schedule:
interval: "weekly" interval: weekly
day: "thursday" # Gives us a working day to merge this before our typical release
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-minor", "version-update:semver-patch"]