From a96e33b2fd986a8c71900beb28f836994a2b292c Mon Sep 17 00:00:00 2001 From: Violeta Georgieva Date: Tue, 19 Mar 2024 13:02:40 +0200 Subject: [PATCH] Add dependabot configuration --- .github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..8ed65d5 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,34 @@ +version: 2 +updates: +- package-ecosystem: gradle + directory: "/" + schedule: + interval: daily + open-pull-requests-limit: 10 + assignees: + - violetagg + target-branch: "1.1.x" + labels: + - type/dependency-upgrade + ignore: + # Don't update Reactor projects + - dependency-name: io.projectreactor:* + - dependency-name: io.projectreactor.addons:* + # JSR305 backport is fixed to last version with annotations (3.0.1) + - dependency-name: "com.google.code.findbugs:jsr305" + # artifactory: don't upgrade to v5 + - dependency-name: "com.jfrog.artifactory" + versions: + - ">= 5.0.a" + rebase-strategy: disabled +- package-ecosystem: github-actions + directory: "/" + schedule: + interval: daily + open-pull-requests-limit: 10 + assignees: + - violetagg + target-branch: "1.1.x" + labels: + - type/dependency-upgrade + rebase-strategy: disabled