Merge pull request #170 from allerta-vvf/dependabot/add-v2-config-file

Upgrade to GitHub-native Dependabot
This commit is contained in:
Matteo Gheza 2021-04-29 00:21:11 +02:00 committed by GitHub
commit 255ff44fcf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 48 additions and 0 deletions

48
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,48 @@
version: 2
updates:
- package-ecosystem: composer
directory: "/server"
schedule:
interval: daily
open-pull-requests-limit: 10
versioning-strategy: increase
allow:
- dependency-type: direct
- dependency-type: indirect
ignore:
- dependency-name: squizlabs/php_codesniffer
versions:
- 3.6.0
- dependency-name: giggsey/libphonenumber-for-php
versions:
- 8.12.17
- 8.12.18
- 8.12.21
- dependency-name: sentry/sentry
versions:
- 3.2.0
- 3.2.1
- dependency-name: symfony/options-resolver
versions:
- 5.2.4
- dependency-name: symfony/var-dumper
versions:
- 5.2.4
- dependency-name: symfony/http-client
versions:
- 5.2.4
- dependency-name: symfony/polyfill-mbstring
versions:
- 1.22.0
- 1.22.1
- dependency-name: symfony/polyfill-ctype
versions:
- 1.22.0
- 1.22.1
- dependency-name: twig/twig
versions:
- 3.3.0
- dependency-name: tracy/tracy
versions:
- 2.8.2
- 2.8.3