scorecard/.github/dependabot.yml
Spencer Schrock 934f17049c
🌱 configure dependabot to group (most) GitHub actions weekly (#3655)
actions which influence the build/release process are excluded.
dependabot will send individual updates for those.

Signed-off-by: Spencer Schrock <sschrock@google.com>
2023-11-10 01:22:29 +00:00

93 lines
2.2 KiB
YAML

version: 2
updates:
- package-ecosystem: gomod
directory: "/"
schedule:
interval: daily
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
open-pull-requests-limit: 3
- package-ecosystem: gomod
directory: "/tools"
schedule:
interval: daily
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
open-pull-requests-limit: 3
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
groups:
github-actions:
patterns:
- "*"
# These actions directly influence the build process and are excluded from grouped updates
exclude-patterns:
- "actions/setup-go"
- "arduino/setup-protoc"
- "goreleaser/goreleaser-action"
- package-ecosystem: docker
directory: "/"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
open-pull-requests-limit: 3
- package-ecosystem: docker
directory: "/cron/internal/bq"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
open-pull-requests-limit: 3
- package-ecosystem: docker
directory: "/cron/internal/worker"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
- package-ecosystem: docker
directory: "/cron/internal/webhook"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
- package-ecosystem: docker
directory: "/cron/internal/controller"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
- package-ecosystem: docker
directory: "/cron/internal/cii"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
- package-ecosystem: docker
directory: "/clients/githubrepo/roundtripper/tokens/server"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"
- package-ecosystem: docker
directory: "/attestor"
schedule:
interval: weekly
rebase-strategy: disabled
commit-message:
prefix: ":seedling:"