From 4b5a860dfef2ecb87762c23e305492c10b2c6345 Mon Sep 17 00:00:00 2001 From: Domagoj Fijan Date: Tue, 9 Apr 2024 16:57:23 -0400 Subject: [PATCH] update dependabot config to use groups --- .github/dependabot.yml | 44 ++++++++++++++++++++++++++++++++---------- 1 file changed, 34 insertions(+), 10 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 465ed2e..e14fc68 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,12 +1,36 @@ version: 2 updates: - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "monthly" - open-pull-requests-limit: 10 - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "monthly" - open-pull-requests-limit: 10 +- package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + open-pull-requests-limit: 10 + groups: + actions-version: + applies-to: version-updates + patterns: + - '*' + actions-security: + applies-to: security-updates + patterns: + - '*' +- package-ecosystem: "pip" + directory: "/" + schedule: + interval: "monthly" + open-pull-requests-limit: 10 + groups: + pip-version: + applies-to: version-updates + patterns: + - '*' + update-types: + - minor + - patch + pip-security: + applies-to: security-updates + patterns: + - '*' + update-types: + - minor + - patch