From 8db1fddf6d1dee71236efb3460eaafab61029fe8 Mon Sep 17 00:00:00 2001 From: Rom1-B Date: Wed, 20 Aug 2025 14:12:57 +0200 Subject: [PATCH] add dependabot --- .github/dependabot.yml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..6ca5eb0 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,33 @@ +version: 2 +updates: + # Ensure GitHub Actions are used in their latest version + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + + # Strategy for composer dependencies + - package-ecosystem: "composer" + directory: "/" + schedule: + interval: "monthly" + allow: + - dependency-type: "direct" + open-pull-requests-limit: 100 + versioning-strategy: "increase" + groups: + dev-dependencies: + dependency-type: "development" + + # Strategy for npm dependencies + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "monthly" + allow: + - dependency-type: "direct" + open-pull-requests-limit: 100 + versioning-strategy: "increase" + groups: + dev-dependencies: + dependency-type: "development"