diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a20a89b..dd1cf7a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,29 +1,57 @@ --- +# source: github/sae-common-workflows/action-ln/sae-iam/dependabot/dependabot.yml +# It's fine to have dependabot consider more languages than used in the repo. version: 2 + +registries: + ghcr: + type: "docker-registry" + url: "ghcr.io" + username: "PAT" + password: "${{secrets.CONTAINER_BUILDER_TOKEN}}" + rubygems-github-packages: + type: "rubygems-server" + url: "rubygems.pkg.github.com/github" + token: "${{secrets.CONTAINER_BUILDER_TOKEN}}" + +# Group all updates into a single PR +multi-ecosystem-groups: + all: + schedule: + interval: "monthly" + updates: - - package-ecosystem: bundler + - package-ecosystem: "bundler" + multi-ecosystem-group: "all" vendor: true directory: "/" - schedule: - interval: weekly - day: "monday" - time: "21:00" - groups: - prod-ruby-dependencies: - dependency-type: "production" - patterns: - - "*" - dev-ruby-dependencies: - dependency-type: "development" - patterns: - - "*" - - package-ecosystem: github-actions + registries: ["rubygems-github-packages"] + patterns: ["*"] + + - package-ecosystem: "docker" + multi-ecosystem-group: "all" directory: "/" - groups: - github-actions: - patterns: - - "*" - schedule: - interval: weekly - day: "tuesday" - time: "21:00" + registries: ["ghcr"] + patterns: ["*"] + + - package-ecosystem: "github-actions" + multi-ecosystem-group: "all" + directory: "/" + patterns: ["*"] + ignore: + - dependency-name: "github/internal-actions" + + - package-ecosystem: "pip" + multi-ecosystem-group: "all" + directory: "/" + patterns: ["*"] + + - package-ecosystem: "gomod" + multi-ecosystem-group: "all" + directory: "/" + patterns: ["*"] + + - package-ecosystem: npm + multi-ecosystem-group: "all" + directory: "/" + patterns: ["*"]