Skip to content

Commit

Permalink
Update dependabot.yml - Remove useless quotes + weekly trigger on sunday
Browse files Browse the repository at this point in the history
  • Loading branch information
yoanm authored Mar 13, 2024
1 parent cb2c1d6 commit 0b3b3ad
Showing 1 changed file with 28 additions and 25 deletions.
53 changes: 28 additions & 25 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,57 +6,60 @@ updates:
# [GHAction]
#
#
- package-ecosystem: "github-actions"
directory: "/"
- package-ecosystem: github-actions
directory: /
schedule:
interval: 'monthly'
interval: weekly
day: sunday # Create PRs during week-ends, they will be ready on monday morning
commit-message:
prefix: "[dependabot][ghaction] - " # No need to specify prod/dev for GHAction as there is only "production" updates !
include: "scope"
prefix: '[dependabot][ghaction] - ' # No need to specify prod/dev for GHAction as there is only "production" updates !
include: scope
groups:
# Group all basic updates inside the a single PR
# No need to split prod/dev as there is only prod updates
all-actions:
applies-to: "version-updates"
patterns: ["*"]
applies-to: version-updates
patterns: ['*']
# Group all security updates inside the a single PR
# No need to split prod/dev as there is only prod updates
# +Most likely no need to split major and other updates either
SECURITY-all:
applies-to: "security-updates"
patterns: ["*"]
applies-to: security-updates
patterns: ['*']
#
#
# [Go]
#
#
- package-ecosystem: gomod
directory: /
schedule:
interval: monthly
# versioning-strategy: "....." # Not applicable (currently) for gomod :/
schedule: # Create PRs during week-ends, they will be ready on monday morning
interval: weekly
day: sunday
# versioning-strategy: ... # Not applicable (currently) for gomod :/
commit-message:
prefix: "[dependabot][prod][gomod] - " # No need to specify prod/dev for Go as there is only "production" packages !
include: "scope"
prefix: '[dependabot][prod][gomod] - ' # No need to specify prod/dev for Go as there is only "production" packages !
include: scope
groups:
# Split basic updates by:
# - ~prod vs dev~ => Not applicable for Go packages :/
# - major vs others (assuming packages properly follow semver !)
prod-majors:
applies-to: "version-updates"
update-types: ["major"]
applies-to: version-updates
update-types: ['major']
patterns: ['*']
prod-others:
applies-to: "version-updates"
patterns: [ "*" ]
applies-to: version-updates
patterns: ['*']
# Split security updates by:
# - ~prod vs dev~ => Not applicable for Go packages :/
# - Major prod updates vs other prod updates
SECURITY-prod-major:
applies-to: "security-updates"
dependency-type: "production"
update-types: ["major"]
patterns: ["*"]
applies-to: security-updates
dependency-type: production
update-types: ['major']
patterns: ['*']
SECURITY-prod:
applies-to: "security-updates"
dependency-type: "production"
patterns: ["*"]
applies-to: security-updates
dependency-type: production
patterns: ['*']

0 comments on commit 0b3b3ad

Please sign in to comment.