dependabot.yml
1 # SPDX-License-Identifier: AGPL-3.0-or-later 2 # Dependabot configuration for RSR-compliant repositories 3 # Covers common ecosystems - remove unused ones for your project 4 5 version: 2 6 updates: 7 # GitHub Actions - always include 8 - package-ecosystem: "github-actions" 9 directory: "/" 10 schedule: 11 interval: "weekly" 12 groups: 13 actions: 14 patterns: 15 - "*" 16 17 # Rust/Cargo 18 - package-ecosystem: "cargo" 19 directory: "/" 20 schedule: 21 interval: "weekly" 22 ignore: 23 - dependency-name: "*" 24 update-types: ["version-update:semver-patch"] 25 26 # Elixir/Mix 27 - package-ecosystem: "mix" 28 directory: "/" 29 schedule: 30 interval: "weekly" 31 32 # Node.js/npm 33 - package-ecosystem: "npm" 34 directory: "/" 35 schedule: 36 interval: "weekly" 37 38 # Python/pip 39 - package-ecosystem: "pip" 40 directory: "/" 41 schedule: 42 interval: "weekly" 43 44 # Nix flakes 45 - package-ecosystem: "nix" 46 directory: "/" 47 schedule: 48 interval: "weekly"