Browse Source

configure dependabot to keep test/dev env & github actions up-to-date

https://github.com/fphammerle/ical2vdir/blob/76d3b61c128fe1cad322e52d5877cc919a533ac4/.github/dependabot.yml
Fabian Peter Hammerle 2 years ago
parent
commit
94ea4b2845
1 changed files with 22 additions and 0 deletions
  1. 22 0
      .github/dependabot.yml

+ 22 - 0
.github/dependabot.yml

@@ -0,0 +1,22 @@
+# sync with https://github.com/fphammerle/ical2vdir/blob/master/.github/dependabot.yml
+
+version: 2
+
+updates:
+- # > Dependabot also supports the following package managers: [...]
+  # > - pipenv, pip-compile, and poetry (specify pip)
+  package-ecosystem: pip
+  directory: /
+  # avoid changes in Pipfile breaking constraints for compatibility with older python versions
+  versioning-strategy: lockfile-only
+  schedule:
+    interval: weekly
+    day: friday
+- package-ecosystem: github-actions
+  directory: /
+  # > YAML aliases are not supported
+  schedule:
+    interval: weekly
+    day: friday
+
+# https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/configuration-options-for-dependency-updates