gittuf/.github/dependabot.yml
Aditya Sirish A Yelgundhalli 5598cc9300
dependabot: Drop frequency to weekly
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-03-01 11:03:30 -08:00

32 lines
710 B
YAML

version: 2
updates:
# Monitor Go dependencies
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "weekly"
# Bundle updates into one PR
groups:
all:
applies-to: version-updates
patterns:
- "*"
commit-message:
prefix: "chore"
include: "scope"
open-pull-requests-limit: 10
# Monitor GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
# Bundle updates into one PR
groups:
all:
applies-to: version-updates
patterns:
- "*"
commit-message:
prefix: "chore"
include: "scope"
open-pull-requests-limit: 10