wallabag/.github/dependabot.yml

version: 2
updates:
- package-ecosystem: npm
  directory: "/"
  schedule:
    interval: weekly
    time: "04:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 10
  ignore:
  - dependency-name: materialize-css
    versions:
    - "> 0.98.2"
- package-ecosystem: composer
  directory: "/"
  schedule:
    interval: daily
    time: "04:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 10
  reviewers:
  - j0k3r
  - tcitworld
  - Kdecherf
  ignore:
  - dependency-name: lcobucci/jwt
    versions:
    - ">= 4.2.0"
- package-ecosystem: github-actions
  directory: "/"
  schedule:
    interval: weekly
    time: "04:00"
    timezone: Europe/Paris
  open-pull-requests-limit: 10
Create Dependabot config file 2020-10-16 12:44:49 +02:00			`version: 2`
			`updates:`
			`- package-ecosystem: npm`
			`directory: "/"`
			`schedule:`
Remove dead test The URL seems to be down now. Move to a more frequent deps update 2022-01-05 13:25:50 +01:00			`interval: weekly`
Create Dependabot config file 2020-10-16 12:44:49 +02:00			`time: "04:00"`
			`timezone: Europe/Paris`
			`open-pull-requests-limit: 10`
			`ignore:`
Update dependabot.yml Remove old lock in NPM after WebPack 5 update. Add `materialize-css` because the update looks like to complex. Remove `symfony/phpunit-bridge` lock 2020-12-07 09:30:25 +01:00			`- dependency-name: materialize-css`
Create Dependabot config file 2020-10-16 12:44:49 +02:00			`versions:`
Update dependabot.yml Remove old lock in NPM after WebPack 5 update. Add `materialize-css` because the update looks like to complex. Remove `symfony/phpunit-bridge` lock 2020-12-07 09:30:25 +01:00			`- "> 0.98.2"`
Create Dependabot config file 2020-10-16 12:44:49 +02:00			`- package-ecosystem: composer`
			`directory: "/"`
			`schedule:`
Remove dead test The URL seems to be down now. Move to a more frequent deps update 2022-01-05 13:25:50 +01:00			`interval: daily`
Create Dependabot config file 2020-10-16 12:44:49 +02:00			`time: "04:00"`
			`timezone: Europe/Paris`
			`open-pull-requests-limit: 10`
			`reviewers:`
			`- j0k3r`
			`- tcitworld`
			`- Kdecherf`
Ignore lcobucci/jwt > 4.2.0 2022-12-16 13:40:12 +01:00			`ignore:`
			`- dependency-name: lcobucci/jwt`
			`versions:`
			`- ">= 4.2.0"`
Included githubactions in the dependabot config This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> 2022-04-19 20:55:41 +02:00			`- package-ecosystem: github-actions`
			`directory: "/"`
			`schedule:`
			`interval: weekly`
			`time: "04:00"`
			`timezone: Europe/Paris`
			`open-pull-requests-limit: 10`