From 054709bacfcb0bcdabe84588bb097d9694fb5dc8 Mon Sep 17 00:00:00 2001 From: Craig Perkins Date: Fri, 1 Nov 2024 21:56:09 -0400 Subject: [PATCH] Add dependabot.yml to monitor outdated dependencies Signed-off-by: Craig Perkins --- .github/dependabot.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..9088426 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +version: 2 +updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "dependabot:" + ignore: + # For all packages, ignore all major versions to minimize breaking issues + - dependency-name: "*" + update-types: ["version-update:semver-major"] + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "dependabot:" \ No newline at end of file