version: 2

updates:
- # > Dependabot also supports the following package managers: [...]
  # > - pipenv, pip-compile, and poetry (specify pip)
  package-ecosystem: pip
  directory: /
  # avoid changes in Pipfile breaking constraints for compatibility with older python versions
  versioning-strategy: lockfile-only
  schedule:
    interval: weekly
    day: friday
- package-ecosystem: github-actions
  directory: /
  # > YAML aliases are not supported
  schedule:
    interval: weekly
    day: friday

# https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/configuration-options-for-dependency-updates