26 lines
791 B
YAML
26 lines
791 B
YAML
# Dependabot configuration
|
|
# Cooldown delays updating normal npm dependencies by 7 days but allows security updates to be processed immediately.
|
|
# Note: Cooldown is not supported for the github-actions ecosystem.
|
|
# Reference: https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
|
|
version: 2
|
|
updates:
|
|
|
|
- package-ecosystem: 'github-actions'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'cron'
|
|
timezone: 'Europe/Berlin'
|
|
cronjob: '15 2 17 * *'
|
|
open-pull-requests-limit: 15
|
|
|
|
- package-ecosystem: 'npm'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'cron'
|
|
timezone: 'Europe/Berlin'
|
|
cronjob: '15 2 17 * *'
|
|
open-pull-requests-limit: 15
|
|
versioning-strategy: 'increase'
|
|
cooldown:
|
|
default-days: 7
|