From e799f2dce6834748c3f1b6f76037e26f38346110 Mon Sep 17 00:00:00 2001 From: Ben Halpern Date: Tue, 21 May 2024 13:38:15 -0400 Subject: [PATCH] Create dependabot.yml (#20968) --- .github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000000..5a22a662420a5 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,38 @@ +version: 2 +updates: + # RubyGems dependency updates (typically for Rails and other Ruby gems) + - package-ecosystem: "bundler" # for RubyGems + directory: "/" # path to the directory containing the Gemfile + schedule: + interval: "weekly" # frequency of update checks + day: "monday" # specify the day to check for updates + time: "04:00" # specify the time of day (in UTC) to check for updates + open-pull-requests-limit: 5 # limit the number of open pull requests + labels: + - "dependencies" # label to assign to pull requests + - "ruby" + milestone: 1 # ID of the milestone to assign to the pull requests if needed + + # Yarn dependency updates (for JavaScript packages) + - package-ecosystem: "yarn" # for Yarn packages + directory: "/" # path to the directory containing the package.json and yarn.lock files + schedule: + interval: "weekly" + day: "tuesday" + time: "04:00" + open-pull-requests-limit: 5 + labels: + - "dependencies" + - "javascript" + milestone: 1 + + # Configuration for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + day: "first" # first day of the month + time: "04:00" + labels: + - "dependencies" + - "github-actions"