1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# Dependabot configuration for automatic dependency updates
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
version: 2
updates:
# Enable version updates for Rust/Cargo
- package-ecosystem: "cargo"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "America/New_York"
# Update strategy
versioning-strategy: "auto"
# Limit the number of open pull requests
open-pull-requests-limit: 10
# Labels to apply to Dependabot PRs
labels:
- "dependencies"
- "rust"
- "automated"
# Assignees for review
assignees:
- "neetagundala"
# Commit message preferences
commit-message:
prefix: "chore"
include: "scope"
# Group updates for minor and patch updates
groups:
patch-updates:
patterns:
- "*"
update-types:
- "patch"
- "minor"
# Security updates should be prioritized
priority: 1
# Allow both direct and indirect dependency updates
allow:
- dependency-type: "all"
# Ignore specific dependencies if needed (uncomment to use)
# ignore:
# - dependency-name: "some-crate"
# versions: ["1.x", "2.x"]
# Enable version updates for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "America/New_York"
# Limit the number of open pull requests
open-pull-requests-limit: 5
# Labels to apply to Dependabot PRs
labels:
- "dependencies"
- "github-actions"
- "automated"
# Assignees for review
assignees:
- "neetagundala"
# Commit message preferences
commit-message:
prefix: "ci"
include: "scope"
# Group all Actions updates together
groups:
github-actions:
patterns:
- "*"
# Enable version updates for npm (if you add any JS/TS tools later)
# - package-ecosystem: "npm"
# directory: "/"
# schedule:
# interval: "weekly"
# open-pull-requests-limit: 5
# labels:
# - "dependencies"
# - "javascript"
# - "automated"