diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3be17fd..73ff583 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,17 +1,37 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - +--- version: 2 updates: - - package-ecosystem: "composer" # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: github-actions + directory: / schedule: - interval: "weekly" - - - package-ecosystem: "github-actions" - directory: "/" + interval: weekly + labels: [dependencies, automated, actions] + groups: + actions-minor-patch: + update-types: [minor, patch] + actions-major: + update-types: [major] + # PHP dev + - package-ecosystem: composer + directory: / schedule: - # Check for updates to GitHub Actions every week - interval: "weekly" + interval: weekly + labels: [dependencies, automated, dev] + allow: + - dependency-type: development + groups: + composer-dev-minor-patch: + update-types: [minor, patch] + composer-dev-major: + update-types: [major] + # PHP prod + - package-ecosystem: composer + directory: / + schedule: + interval: weekly + labels: [dependencies, automated, prod] + allow: + - dependency-type: production + groups: + composer-runtime-minor-patch: + update-types: [minor, patch]