| 1 | # Please see the documentation for all configuration options: |
| 2 | # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file |
| 3 | |
| 4 | version: 2 |
| 5 | updates: |
| 6 | - package-ecosystem: "cargo" |
| 7 | directory: "/" |
| 8 | schedule: |
| 9 | interval: "daily" |
| 10 | reviewers: |
| 11 | - "warpdotdev/tech-leads" |
| 12 | # Only send security updates, not general version updates. |
| 13 | open-pull-requests-limit: 0 |
| 14 | - package-ecosystem: "github-actions" |
| 15 | directory: "/" |
| 16 | schedule: |
| 17 | interval: "daily" |
| 18 | reviewers: |
| 19 | - "warpdotdev/tech-leads" |
| 20 | cooldown: |
| 21 | # Don't update to any action release that is less than two weeks old. |
| 22 | default-days: 14 |
| 23 | groups: |
| 24 | # Group all non-major updates of official actions together - they're lower-risk. |
| 25 | official-actions: |
| 26 | applies-to: version-updates |
| 27 | patterns: |
| 28 | - "actions/*" |
| 29 | update-types: |
| 30 | - "minor" |
| 31 | - "patch" |
| 32 | # Group all non-major updates of Namespace actions together - they're lower-risk. |
| 33 | namespace-actions: |
| 34 | applies-to: version-updates |
| 35 | patterns: |
| 36 | - "namespacelabs/*" |
| 37 | - "namespace-actions/*" |
| 38 | update-types: |
| 39 | - "minor" |
| 40 | - "patch" |