version: 2 updates: - # > Dependabot also supports the following package managers: [...] # > - pipenv, pip-compile, and poetry (specify pip) package-ecosystem: pip directory: / # avoid changes in Pipfile breaking constraints for compatibility with older python versions versioning-strategy: lockfile-only schedule: interval: weekly day: friday - package-ecosystem: github-actions directory: / # > YAML aliases are not supported schedule: interval: weekly day: friday # https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/configuration-options-for-dependency-updates