void-eid/.github/dependabot.yml at fd462c2f15cd0d343d8e4410dce322695d310762 · Scetrov/void-eid · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
version: 2
updates:
  # GitHub Actions - automatically update and SHA-pin per SEC-11
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
    cooldown:
      default-days: 5
    groups:
      github-actions:
        patterns:
          - "*"
    open-pull-requests-limit: 10
    commit-message:
      prefix: "ci"
      include: "scope"
    labels:
      - "dependencies"
      - "github-actions"
      - "security"

  # Backend Rust dependencies
  - package-ecosystem: "cargo"
    directory: "/src/backend"
    schedule:
      interval: "weekly"
      day: "monday"
    cooldown:
      default-days: 5
    groups:
      rust-dependencies:
        patterns:
          - "*"
    open-pull-requests-limit: 10
    commit-message:
      prefix: "deps(backend)"
      include: "scope"
    labels:
      - "dependencies"
      - "rust"

  # Frontend npm dependencies (Bun)
  - package-ecosystem: "npm"
    directory: "/src/frontend"
    schedule:
      interval: "weekly"
      day: "monday"
    cooldown:
      default-days: 5
    groups:
      frontend-dependencies:
        patterns:
          - "*"
    open-pull-requests-limit: 10
    commit-message:
      prefix: "deps(frontend)"
      include: "scope"
    labels:
      - "dependencies"
      - "javascript"