entitlements-github-plugin/.github/dependabot.yml at 91668de3b9a1653e59b61963a9073b02ac3663c1 · github/entitlements-github-plugin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
---
# source: github/sae-common-workflows/action-ln/sae-iam/dependabot/dependabot.yml
# It's fine to have dependabot consider more languages than used in the repo.
version: 2

registries:
  ghcr:
    type: "docker-registry"
    url: "ghcr.io"
    username: "PAT"
    password: "${{secrets.CONTAINER_BUILDER_TOKEN}}"
  rubygems-github-packages:
    type: "rubygems-server"
    url: "rubygems.pkg.github.com/github"
    token: "${{secrets.CONTAINER_BUILDER_TOKEN}}"

# Group all updates into a single PR
multi-ecosystem-groups:
  all:
    schedule:
      interval: "monthly"

updates:
  - package-ecosystem: "bundler"
    multi-ecosystem-group: "all"
    vendor: true
    directory: "/"
    registries: ["rubygems-github-packages"]
    patterns: ["*"]

  - package-ecosystem: "docker"
    multi-ecosystem-group: "all"
    directory: "/"
    registries: ["ghcr"]
    patterns: ["*"]

  - package-ecosystem: "github-actions"
    multi-ecosystem-group: "all"
    directory: "/"
    patterns: ["*"]
    ignore:
      - dependency-name: "github/internal-actions"
    cooldown:
      default-days: 7

  - package-ecosystem: "pip"
    multi-ecosystem-group: "all"
    directory: "/"
    patterns: ["*"]

  - package-ecosystem: "gomod"
    multi-ecosystem-group: "all"
    directory: "/"
    patterns: ["*"]

  - package-ecosystem: npm
    multi-ecosystem-group: "all"
    directory: "/"
    patterns: ["*"]