1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# Dependabot configuration for granite-cli
# See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# GitHub Actions dependencies
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 10
labels:
- "dependencies"
- "github-actions"
commit-message:
prefix: "chore(deps)"
include: "scope"
reviewers:
- "afrittoli"
# Group all GitHub Actions updates into a single PR
groups:
github-actions:
patterns:
- "*"
# Rust/Cargo dependencies
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 10
labels:
- "dependencies"
- "rust"
commit-message:
prefix: "chore(deps)"
include: "scope"
reviewers:
- "afrittoli"
# Group minor and patch updates together
groups:
rust-minor-patch:
update-types:
- "minor"
- "patch"
rust-dev-dependencies:
dependency-type: "development"
update-types:
- "minor"
- "patch"
# Allow both direct and indirect dependencies
allow:
- dependency-type: "direct"
- dependency-type: "indirect"
# Ignore specific dependencies if needed (uncomment and modify as needed)
# ignore:
# - dependency-name: "some-crate"
# versions: ["1.x"]