From cd0c0e23af4881efbade296c2656d0ccb56ebd60 Mon Sep 17 00:00:00 2001 From: Paul Hewlett Date: Wed, 19 Mar 2025 11:01:04 +0000 Subject: [PATCH] Upgrade dependabot.yml AB#10361 --- .github/dependabot.yml | 32 ++++++++++++++++++++++++++++++++ .github/workflows/push.yaml | 4 ++-- 2 files changed, 34 insertions(+), 2 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..166ba1a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,32 @@ +# refer: https://github.com/dependabot/dependabot-core/blob/main/.github/dependabot.yml +version: 2 +registries: + github-octocat: + type: git + url: https://github.com + username: x-access-token + password: ${{ secrets.DEPENDABOT_PAT }} + +updates: + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + registries: + - github-octocat + directory: "/" + schedule: + # Check for updates managed by Composer once a week + interval: "weekly" + day: "sunday" + time: "16:00" + + # Maintain dependencies for Golang + - package-ecosystem: "gomod" + registries: + - github-octocat + directory: "/" + schedule: + # Check for updates managed by Composer once a week + interval: "weekly" + day: "sunday" + time: "16:00" + diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml index 5f8e0f1..d24ebc1 100644 --- a/.github/workflows/push.yaml +++ b/.github/workflows/push.yaml @@ -1,4 +1,4 @@ -name: Quality Control +name: push on: [ pull_request, @@ -55,4 +55,4 @@ jobs: - name: Stop azurite if: always() run: | - task azurite:stop \ No newline at end of file + task azurite:stop