346d7fe019
By default, Dependabot opens a new pull request to update each dependency and we have a very large number of Dependabot pull requests to review and merge, which can quickly become difficult to manage. The intention of this patch to dependabot is to have: - one PR for all minor & patch level updates - one PR for every dependency with a major update [1] https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates [2] https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#groups Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
open-pull-requests-limit: 5
|
|
target-branch: "master"
|
|
commit-message:
|
|
prefix: "[upd] pypi:"
|
|
groups:
|
|
minor:
|
|
applies-to: version-updates
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
|
|
- package-ecosystem: "npm"
|
|
directory: "/client/simple"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
open-pull-requests-limit: 5
|
|
target-branch: "master"
|
|
commit-message:
|
|
prefix: "[upd] web-client (simple):"
|
|
groups:
|
|
minor:
|
|
applies-to: version-updates
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
|
|
- package-ecosystem: "docker"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
target-branch: "master"
|
|
commit-message:
|
|
prefix: "[upd] docker:"
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "friday"
|
|
target-branch: "master"
|
|
commit-message:
|
|
prefix: "[upd] github-actions:"
|