dependabot.yml (707B)
1 # Dependabot helps maintain dependencies updated for different package ecosystems 2 # 3 # Here is the documentation for all configuration options: 4 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file 5 6 version: 2 7 updates: 8 9 # Maintain dependencies for GitHub Actions 10 - package-ecosystem: "github-actions" 11 directory: "/" 12 schedule: 13 interval: "weekly" 14 15 # Maintain dependencies for pip 16 - package-ecosystem: "pip" 17 directory: "/" 18 schedule: 19 interval: "weekly" 20 ignore: 21 # Ignore patch updates for all pip dependencies 22 - dependency-name: "*" 23 update-types: ["version-update:semver-patch"]