action-security-code-scanner/.github/dependabot.yml at c6206066f37fb8d391b366c215e3c21b9babd632 · MetaMask/action-security-code-scanner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
version: 2

updates:
  # 1) GitHub Actions
  - package-ecosystem: github-actions
    directory: / # GitHub scans .github/workflows from here
    schedule:
      interval: weekly
      day: monday
      time: '03:00'
    open-pull-requests-limit: 5
    assignees: ['witmicko', 'NicholasEllul']
    labels: ['dependencies', 'github-actions']
    commit-message:
      prefix: 'deps(actions)'
      include: 'scope'
    groups:
      core-actions-minor-patch:
        update-types: ['minor', 'patch']
        patterns:
          - 'actions/*'
          - 'github/*'
      third-party-actions-minor-patch:
        update-types: ['minor', 'patch']
        patterns:
          - '*'
        exclude-patterns:
          - 'actions/*'
          - 'github/*'
    cooldown:
      default-days: 7

  # 2) npm dependencies (package.json)
  - package-ecosystem: npm
    directory: /
    schedule:
      interval: weekly
      day: monday
      time: '04:00'
    open-pull-requests-limit: 5
    assignees: ['witmicko', 'NicholasEllul']
    labels: ['dependencies', 'npm']
    commit-message:
      prefix: 'deps(npm)'
      include: 'scope'
    groups:
      npm-minor-patch:
        update-types: ['minor', 'patch']
        patterns:
          - '*'
    cooldown:
      default-days: 7