diff --git a/.github/dependabot.yml b/.github/dependabot.yml index cd4692b7..1712a6c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,14 +1,91 @@ - # For details on how this file works refer to: - # - https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file +# For details on how this file works refer to: +# - https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: # Maintain dependencies for GitHub Actions # - Check for updates once a week # - Group all updates into a single PR - - package-ecosystem: github-actions - directory: / + - package-ecosystem: "github-actions" + directory: "/" schedule: - interval: weekly + interval: "weekly" groups: all-actions: - patterns: [ "*" ] \ No newline at end of file + patterns: [ "*" ] + + # Maintain dependencies for TypeScript and JavaScript + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + + Maintain dependencies for TypeScript and JavaScript + - package-ecosystem: "npm" + directory: "/scripts/gpublish" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major", "version-update:semver-patch"] + + # Maintain dependencies for Gradle + - package-ecosystem: "gradle" + directory: "/app/android" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] + + # Maintain dependencies for Gradle + - package-ecosystem: "gradle" + directory: "/app/android/app" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] + + # Maintain dependencies for Ruby + - package-ecosystem: "bundler" + directory: "/app" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-major"] + + # Maintain dependencies for docker images inside manifests + - package-ecosystem: "docker" + directory: "/devops/charts/loki-logstack" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" + + - package-ecosystem: "docker" + directory: "devops/charts/loki-logstack/templates" + schedule: + interval: "weekly" + day: "monday" + time: "04:00" + timezone: "Canada/Pacific" \ No newline at end of file