From 7fa755958092b2afe82a4e8ddd55ba26e16589b8 Mon Sep 17 00:00:00 2001 From: Fabian Kaczmarczyck Date: Tue, 23 Jul 2024 14:05:13 +0200 Subject: [PATCH] Removes the dependabot version update config The goal of this commit is to enable security updates. Before, security updates were prevented because they followed the config. We didn't benefit from version updates so far because of this same file, and we don't want them. While 2.1 is our main branch, version updates make even less sense, since we want to keep it stable. --- .github/dependabot.yml | 27 --------------------------- 1 file changed, 27 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 1c2fa0fe..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,27 +0,0 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - -version: 2 -updates: - - package-ecosystem: "cargo" - directory: "/" - labels: - - "dependencies" - # Run every Monday - schedule: - interval: "weekly" - timezone: "Europe/Zurich" - # Group PRs to avoid having to rebase/merge too many - groups: - dependabot: - patterns: - - "*" - # Only care about our direct dependencies - allow: - - dependency-type: "direct" - ignore: - # Filter out semver patches updates to reduce the frequency of updates - - dependency-name: "*" - update-types: ["version-update:semver-patch"]