mirror of
				https://github.com/actions/checkout.git
				synced 2025-11-04 05:58:40 +08:00 
			
		
		
		
	Update dependabot.yml
Signed-off-by: Dev-Re2906 <jalilirad2906@gmail.com>
This commit is contained in:
		
							parent
							
								
									ce173427b5
								
							
						
					
					
						commit
						61c760622c
					
				
							
								
								
									
										92
									
								
								.github/dependabot.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										92
									
								
								.github/dependabot.yml
									
									
									
									
										vendored
									
									
								
							| 
						 | 
					@ -1,20 +1,88 @@
 | 
				
			||||||
---
 | 
					 | 
				
			||||||
version: 2
 | 
					version: 2
 | 
				
			||||||
 | 
					 | 
				
			||||||
updates:
 | 
					updates:
 | 
				
			||||||
 | 
					  # Node.js (npm, yarn, pnpm)
 | 
				
			||||||
  - package-ecosystem: "npm"
 | 
					  - package-ecosystem: "npm"
 | 
				
			||||||
    directory: "/"
 | 
					    directory: "/"
 | 
				
			||||||
    schedule:
 | 
					    schedule:
 | 
				
			||||||
    interval: "weekly"
 | 
					      interval: "daily"
 | 
				
			||||||
  groups:
 | 
					    open-pull-requests-limit: 10
 | 
				
			||||||
    minor-npm-dependencies:
 | 
					    commit-message:
 | 
				
			||||||
      # NPM: Only group minor and patch updates (we want to carefully review major updates)
 | 
					      prefix: "deps"
 | 
				
			||||||
      update-types: [minor, patch]
 | 
					      include: "scope"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "automerge"]
 | 
				
			||||||
 | 
					    reviewers: ["your-github-username"]
 | 
				
			||||||
 | 
					    assignees: ["your-github-username"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Python (pip)
 | 
				
			||||||
 | 
					  - package-ecosystem: "pip"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "python"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Rust (cargo)
 | 
				
			||||||
 | 
					  - package-ecosystem: "cargo"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "rust"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Go modules
 | 
				
			||||||
 | 
					  - package-ecosystem: "gomod"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "go"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Docker
 | 
				
			||||||
 | 
					  - package-ecosystem: "docker"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "docker"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # GitHub Actions
 | 
				
			||||||
  - package-ecosystem: "github-actions"
 | 
					  - package-ecosystem: "github-actions"
 | 
				
			||||||
    directory: "/"
 | 
					    directory: "/"
 | 
				
			||||||
    schedule:
 | 
					    schedule:
 | 
				
			||||||
    interval: "weekly"
 | 
					      interval: "daily"
 | 
				
			||||||
  groups:
 | 
					    labels: ["ci", "dependencies"]
 | 
				
			||||||
    minor-actions-dependencies:
 | 
					
 | 
				
			||||||
      # GitHub Actions: Only group minor and patch updates (we want to carefully review major updates)
 | 
					  # PHP (Composer)
 | 
				
			||||||
      update-types: [minor, patch]
 | 
					  - package-ecosystem: "composer"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "php"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Ruby (Bundler)
 | 
				
			||||||
 | 
					  - package-ecosystem: "bundler"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "ruby"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Java (Maven)
 | 
				
			||||||
 | 
					  - package-ecosystem: "maven"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "java"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # .NET (NuGet)
 | 
				
			||||||
 | 
					  - package-ecosystem: "nuget"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    labels: ["dependencies", "dotnet"]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					  # Security-focused updates
 | 
				
			||||||
 | 
					  - package-ecosystem: "npm"
 | 
				
			||||||
 | 
					    directory: "/"
 | 
				
			||||||
 | 
					    schedule:
 | 
				
			||||||
 | 
					      interval: "daily"
 | 
				
			||||||
 | 
					    allow:
 | 
				
			||||||
 | 
					      - dependency-type: "direct"
 | 
				
			||||||
 | 
					    labels: ["security", "automerge"]
 | 
				
			||||||
 | 
					    commit-message:
 | 
				
			||||||
 | 
					      prefix: "security"
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue
	
	Block a user