mirror of
https://github.com/gbdev/rgbds.git
synced 2026-08-20 22:04:32 +00:00
Rangi
250a94c588
We specify major-only versions, e.g. `actions/checkout@v7`, which automatically uses the latest minor+patch of that release.
20 lines
751 B
YAML
20 lines
751 B
YAML
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "quarterly" # We do not need *immediate* bumps, only frequent enough to avoid falling out of support range.
|
|
cooldown: # Avoid bumping deps immediately, to give time for security audits to be conducted
|
|
default-days: 15
|
|
include: [ "*" ]
|
|
groups:
|
|
actions:
|
|
patterns: [ "*" ]
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types:
|
|
- "version-update:semver-minor"
|
|
- "version-update:semver-patch"
|
|
labels: [ builds ] # Since those are CI-related updates...
|