|
| 1 | +# To get started with Dependabot version updates, you'll need to specify which |
| 2 | +# package ecosystems to update and where the package manifests are located. |
| 3 | +# Please see the documentation for all configuration options: |
| 4 | +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file |
| 5 | +version: 2 |
| 6 | +updates: |
| 7 | + - package-ecosystem: "pip" |
| 8 | + directory: "/" |
| 9 | + schedule: |
| 10 | + interval: "weekly" |
| 11 | + day: "monday" |
| 12 | + time: "09:00" |
| 13 | + timezone: "Asia/Kolkata" |
| 14 | + open-pull-requests-limit: 10 |
| 15 | + reviewers: |
| 16 | + - "Deepthi-Chand" |
| 17 | + labels: |
| 18 | + - "dependencies" |
| 19 | + - "python" |
| 20 | + - "security" |
| 21 | + commit-message: |
| 22 | + prefix: "chore(deps)" |
| 23 | + include: "scope" |
| 24 | + # Group updates to reduce PR noise |
| 25 | + groups: |
| 26 | + # Group all patch and minor updates for dev dependencies |
| 27 | + dev-dependencies: |
| 28 | + dependency-type: "development" |
| 29 | + update-types: |
| 30 | + - "minor" |
| 31 | + - "patch" |
| 32 | + # Group patch updates for production dependencies |
| 33 | + production-dependencies: |
| 34 | + dependency-type: "production" |
| 35 | + update-types: |
| 36 | + - "patch" |
| 37 | + # Allow both direct and indirect dependencies |
| 38 | + allow: |
| 39 | + - dependency-type: "direct" |
| 40 | + - dependency-type: "indirect" |
| 41 | + |
| 42 | + # Docker base images |
| 43 | + - package-ecosystem: "docker" |
| 44 | + directory: "/" |
| 45 | + schedule: |
| 46 | + interval: "weekly" |
| 47 | + day: "monday" |
| 48 | + time: "09:00" |
| 49 | + timezone: "Asia/Kolkata" |
| 50 | + open-pull-requests-limit: 5 |
| 51 | + reviewers: |
| 52 | + - "Deepthi-Chand" |
| 53 | + labels: |
| 54 | + - "dependencies" |
| 55 | + - "docker" |
| 56 | + - "infrastructure" |
| 57 | + commit-message: |
| 58 | + prefix: "chore(docker)" |
| 59 | + include: "scope" |
| 60 | + |
| 61 | + # GitHub Actions workflows |
| 62 | + - package-ecosystem: "github-actions" |
| 63 | + directory: "/" |
| 64 | + schedule: |
| 65 | + interval: "weekly" |
| 66 | + day: "monday" |
| 67 | + time: "09:00" |
| 68 | + timezone: "Asia/Kolkata" |
| 69 | + open-pull-requests-limit: 5 |
| 70 | + reviewers: |
| 71 | + - "Deepthi-Chand" |
| 72 | + labels: |
| 73 | + - "dependencies" |
| 74 | + - "github-actions" |
| 75 | + - "ci/cd" |
| 76 | + commit-message: |
| 77 | + prefix: "chore(ci)" |
| 78 | + include: "scope" |
| 79 | + # Group all GitHub Actions updates together |
| 80 | + groups: |
| 81 | + github-actions: |
| 82 | + patterns: |
| 83 | + - "*" |
| 84 | + |
0 commit comments