/ .github / dependabot.yml
dependabot.yml
 1  # SPDX-License-Identifier: AGPL-3.0-or-later
 2  # Dependabot configuration for RSR-compliant repositories
 3  # Covers common ecosystems - remove unused ones for your project
 4  
 5  version: 2
 6  updates:
 7    # GitHub Actions - always include
 8    - package-ecosystem: "github-actions"
 9      directory: "/"
10      schedule:
11        interval: "weekly"
12      groups:
13        actions:
14          patterns:
15            - "*"
16  
17    # Rust/Cargo
18    - package-ecosystem: "cargo"
19      directory: "/"
20      schedule:
21        interval: "weekly"
22      ignore:
23        - dependency-name: "*"
24          update-types: ["version-update:semver-patch"]
25  
26    # Elixir/Mix
27    - package-ecosystem: "mix"
28      directory: "/"
29      schedule:
30        interval: "weekly"
31  
32    # Node.js/npm
33    - package-ecosystem: "npm"
34      directory: "/"
35      schedule:
36        interval: "weekly"
37  
38    # Python/pip
39    - package-ecosystem: "pip"
40      directory: "/"
41      schedule:
42        interval: "weekly"
43  
44    # Nix flakes
45    - package-ecosystem: "nix"
46      directory: "/"
47      schedule:
48        interval: "weekly"