/ .github / dependabot.yml
dependabot.yml
 1  version: 2
 2  updates:
 3  - package-ecosystem: cargo
 4    directory: "/"
 5    schedule:
 6      interval: "weekly"
 7      timezone: "Etc/UTC"
 8      day: "saturday" # so we can approve and merge over the weekend, while less is going on
 9      time: "05:30"
10    ignore:
11    - dependency-name: "bitcoin" # we can't "just update it"
12    - dependency-name: "lightning" # semver too hard :D
13    open-pull-requests-limit: 5 # more than this would mean lot of rebasing
14    groups:
15      # put all patch version updates in one big PR, as
16      # these should just work anyway
17      patch:
18        applies-to: version-updates
19        patterns:
20        - "*"
21        update-types:
22        - "patch"
23  - package-ecosystem: github-actions
24    directory: "/"
25    schedule:
26      interval: "weekly"
27      timezone: "Etc/UTC"
28      day: "saturday" # so we can approve and merge over the weekend, while less is going on
29      time: "05:30"