|
3 | 3 | # Please see the documentation for all configuration options: |
4 | 4 | # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file |
5 | 5 |
|
| 6 | +# This Dependabot configuration file is set up to manage dependency updates for both Python packages (pip) and GitHub Actions workflows. |
| 7 | +# |
| 8 | +# Key points: |
| 9 | +# - Dependencies are categorized into production and development groups. |
| 10 | +# - The "setuptools" package is treated as an exception: it is excluded from the production group but is still allowed to be updated as a production dependency. |
| 11 | +# - The configuration includes specific labels, assignees, and commit message formats to streamline the update process. |
| 12 | +# - Updates are scheduled to run weekly on Tuesdays. |
| 13 | + |
6 | 14 | version: 2 |
7 | 15 | updates: |
8 | | - - package-ecosystem: "pip" # See documentation for possible values |
9 | | - directory: "/" # Location of package manifests |
10 | | - milestone: 2 |
11 | | - target-branch: "master" |
12 | | - versioning-strategy: increase-if-necessary |
13 | | - # Labels on pull requests for version updates only |
14 | | - labels: |
15 | | - - "Configs" |
16 | | - - "Duplicate" |
17 | | - - "Python Lang" |
18 | | - - "Python Repo" |
19 | | - groups: |
20 | | - production-dependencies: |
21 | | - dependency-type: "production" |
22 | | - exclude-patterns: |
23 | | - - "setuptools*" |
24 | | - development-dependencies: |
25 | | - dependency-type: "development" |
26 | | - allow: |
27 | | - - dependency-name: "setuptools" |
28 | | - dependency-type: "production" |
29 | | - - dependency-name: "pip" |
30 | | - dependency-type: "direct" |
31 | | - - dependency-name: "wheel" |
32 | | - dependency-type: "production" |
33 | | - - dependency-name: "build" |
34 | | - dependency-type: "production" |
35 | | - - dependency-name: "argparse" |
36 | | - dependency-type: "direct" |
37 | | - - dependency-name: "six" |
38 | | - dependency-type: "direct" |
39 | | - - dependency-name: "tox" |
40 | | - dependency-type: "development" |
41 | | - - dependency-name: "virtualenv" |
42 | | - dependency-type: "development" |
43 | | - assignees: |
44 | | - - "reactive-firewall" |
45 | | - commit-message: |
46 | | - prefix: "[HOTFIX] " |
47 | | - include: "scope" |
48 | | - schedule: |
49 | | - interval: "weekly" |
50 | | - day: "tuesday" |
| 16 | + - package-ecosystem: "pip" # See documentation for possible values |
| 17 | + directory: "/" # Location of package manifests |
| 18 | + milestone: 2 |
| 19 | + target-branch: "master" |
| 20 | + versioning-strategy: increase-if-necessary |
| 21 | + # Labels on pull requests for version updates only |
| 22 | + labels: |
| 23 | + - "Configs" |
| 24 | + - "Version Update" |
| 25 | + - "Python Lang" |
| 26 | + - "Python Repo" |
| 27 | + groups: |
| 28 | + production-dependencies: |
| 29 | + dependency-type: "production" |
| 30 | + exclude-patterns: |
| 31 | + - "setuptools*" |
| 32 | + development-dependencies: |
| 33 | + dependency-type: "development" |
| 34 | + allow: |
| 35 | + - dependency-name: "setuptools" |
| 36 | + dependency-type: "production" |
| 37 | + - dependency-name: "pip" |
| 38 | + dependency-type: "direct" |
| 39 | + - dependency-name: "wheel" |
| 40 | + dependency-type: "production" |
| 41 | + - dependency-name: "build" |
| 42 | + dependency-type: "production" |
| 43 | + - dependency-name: "argparse" |
| 44 | + dependency-type: "direct" |
| 45 | + - dependency-name: "six" |
| 46 | + dependency-type: "direct" |
| 47 | + - dependency-name: "tox" |
| 48 | + dependency-type: "development" |
| 49 | + - dependency-name: "virtualenv" |
| 50 | + dependency-type: "development" |
| 51 | + assignees: |
| 52 | + - "reactive-firewall" |
| 53 | + commit-message: |
| 54 | + prefix: "[HOTFIX] " |
| 55 | + include: "scope" |
| 56 | + schedule: |
| 57 | + interval: "weekly" |
| 58 | + day: "tuesday" |
51 | 59 | - package-ecosystem: "github-actions" # See documentation for possible values |
52 | 60 | directory: ".github/workflows/" # Location of package manifests |
53 | 61 | milestone: 2 |
54 | 62 | target-branch: "master" |
55 | 63 | # Labels on pull requests for version updates only |
56 | 64 | labels: |
57 | 65 | - "Configs" |
58 | | - - "Duplicate" |
| 66 | + - "Version Update" |
59 | 67 | - "GitHub" |
60 | 68 | - "Testing" |
61 | 69 | - "Python Repo" |
|
0 commit comments