Skip to content

Commit 61a081c

Browse files
authored
APP-178 - Configure Dependabot to open PRs for dependency version upgrades, not just vulnerabilities (#629)
This PR adds a dependabot.yml file to the repo in order to configure Dependabot version updates for the following package ecosystems within this project: - Docker - Gradle - GitHub Actions
1 parent d83456d commit 61a081c

1 file changed

Lines changed: 52 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
# Please see the documentation for all configuration options:
2+
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
3+
4+
version: 2
5+
updates:
6+
# Enable version updates for Gradle
7+
- package-ecosystem: "gradle"
8+
directories:
9+
- "/"
10+
- "/common-util"
11+
- "/ldfdata-service"
12+
- "/investigation-service"
13+
- "/liquibase-service"
14+
- "/observation-service"
15+
- "/organization-service"
16+
- "/person-service"
17+
- "/post-processing-service"
18+
schedule:
19+
interval: "weekly"
20+
open-pull-requests-limit: 2
21+
ignore:
22+
- dependency-name: "*"
23+
update-types: ["version-update:semver-patch"]
24+
25+
# Enable version updates for Docker
26+
- package-ecosystem: "docker"
27+
directories:
28+
- "/ldfdata-service"
29+
- "/investigation-service"
30+
- "/liquibase-service"
31+
- "/observation-service"
32+
- "/organization-service"
33+
- "/person-service"
34+
- "/post-processing-service"
35+
schedule:
36+
interval: "weekly"
37+
open-pull-requests-limit: 2
38+
ignore:
39+
- dependency-name: "*"
40+
update-types: ["version-update:semver-patch"]
41+
42+
# Enable version updates for GitHub Actions
43+
- package-ecosystem: "github-actions"
44+
# Workflow files stored in the default location of `.github/workflows`
45+
# You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.
46+
directory: "/"
47+
schedule:
48+
interval: "weekly"
49+
open-pull-requests-limit: 2
50+
ignore:
51+
- dependency-name: "*"
52+
update-types: ["version-update:semver-patch"]

0 commit comments

Comments
 (0)