roc/.github/dependabot.yml
Ayaz 65ba76aca9
Only allow dependabot to send security-based updates
As discussed previously on Zulip. I think we should either do this, or have all Dependabot PRs be batched. Right now it's way too noisy.

Signed-off-by: Ayaz <20735482+ayazhafiz@users.noreply.github.com>
2022-10-08 14:16:13 -05:00

12 lines
299 B
YAML

version: 2
updates:
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "07:00"
timezone: "Europe/Brussels"
# Disable all version updates, only critical security updates will be submitted
open-pull-requests-limit: 0