mirror of
				https://code.forgejo.org/actions/checkout.git
				synced 2025-10-30 20:42:30 +00:00 
			
		
		
		
	Update dependabot.yml
Signed-off-by: Dev-Re2906 <jalilirad2906@gmail.com>
This commit is contained in:
		
							parent
							
								
									ce173427b5
								
							
						
					
					
						commit
						61c760622c
					
				
					 1 changed files with 86 additions and 18 deletions
				
			
		
							
								
								
									
										92
									
								
								.github/dependabot.yml
									
										
									
									
										vendored
									
									
								
							
							
						
						
									
										92
									
								
								.github/dependabot.yml
									
										
									
									
										vendored
									
									
								
							|  | @ -1,20 +1,88 @@ | ||||||
| --- |  | ||||||
| version: 2 | version: 2 | ||||||
| 
 |  | ||||||
| updates: | updates: | ||||||
|  |   # Node.js (npm, yarn, pnpm) | ||||||
|   - package-ecosystem: "npm" |   - package-ecosystem: "npm" | ||||||
|     directory: "/" |     directory: "/" | ||||||
|     schedule: |     schedule: | ||||||
|     interval: "weekly" |       interval: "daily" | ||||||
|   groups: |     open-pull-requests-limit: 10 | ||||||
|     minor-npm-dependencies: |     commit-message: | ||||||
|       # NPM: Only group minor and patch updates (we want to carefully review major updates) |       prefix: "deps" | ||||||
|       update-types: [minor, patch] |       include: "scope" | ||||||
|  |     labels: ["dependencies", "automerge"] | ||||||
|  |     reviewers: ["your-github-username"] | ||||||
|  |     assignees: ["your-github-username"] | ||||||
|  | 
 | ||||||
|  |   # Python (pip) | ||||||
|  |   - package-ecosystem: "pip" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "python"] | ||||||
|  | 
 | ||||||
|  |   # Rust (cargo) | ||||||
|  |   - package-ecosystem: "cargo" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "rust"] | ||||||
|  | 
 | ||||||
|  |   # Go modules | ||||||
|  |   - package-ecosystem: "gomod" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "go"] | ||||||
|  | 
 | ||||||
|  |   # Docker | ||||||
|  |   - package-ecosystem: "docker" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "docker"] | ||||||
|  | 
 | ||||||
|  |   # GitHub Actions | ||||||
|   - package-ecosystem: "github-actions" |   - package-ecosystem: "github-actions" | ||||||
|     directory: "/" |     directory: "/" | ||||||
|     schedule: |     schedule: | ||||||
|     interval: "weekly" |       interval: "daily" | ||||||
|   groups: |     labels: ["ci", "dependencies"] | ||||||
|     minor-actions-dependencies: | 
 | ||||||
|       # GitHub Actions: Only group minor and patch updates (we want to carefully review major updates) |   # PHP (Composer) | ||||||
|       update-types: [minor, patch] |   - package-ecosystem: "composer" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "php"] | ||||||
|  | 
 | ||||||
|  |   # Ruby (Bundler) | ||||||
|  |   - package-ecosystem: "bundler" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "ruby"] | ||||||
|  | 
 | ||||||
|  |   # Java (Maven) | ||||||
|  |   - package-ecosystem: "maven" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "java"] | ||||||
|  | 
 | ||||||
|  |   # .NET (NuGet) | ||||||
|  |   - package-ecosystem: "nuget" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     labels: ["dependencies", "dotnet"] | ||||||
|  | 
 | ||||||
|  |   # Security-focused updates | ||||||
|  |   - package-ecosystem: "npm" | ||||||
|  |     directory: "/" | ||||||
|  |     schedule: | ||||||
|  |       interval: "daily" | ||||||
|  |     allow: | ||||||
|  |       - dependency-type: "direct" | ||||||
|  |     labels: ["security", "automerge"] | ||||||
|  |     commit-message: | ||||||
|  |       prefix: "security" | ||||||
|  |  | ||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue