Skip to content

Commit

Permalink
Update dependabot.yml
Browse files Browse the repository at this point in the history
Bundle dep upgrades into a rollup PR using dependabot groups.

Works around this warning that appears on some Artichoke repositories:

> **Dependabot updates are paused**
>
> We noticed you haven't used Dependabot in a while, so we've paused new pull
> requests for you. Merge a Dependabot pull request to resume automatically
> creating Dependabot updates or disable security and version updates. See open
> Dependabot pull requests


See:

- https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/
- https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
  • Loading branch information
lopopolo authored Jul 3, 2023
1 parent 4b7e35d commit 921aaf9
Showing 1 changed file with 12 additions and 2 deletions.
14 changes: 12 additions & 2 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ updates:
directory: "/"
schedule:
interval: "monthly"
groups:
gha-deps:
patterns:
- "*"
assignees:
- lopopolo
labels:
Expand All @@ -13,7 +17,10 @@ updates:
directory: "/"
schedule:
interval: monthly
open-pull-requests-limit: 10
groups:
cargo-deps:
patterns:
- "*"
assignees:
- lopopolo
labels:
Expand All @@ -22,7 +29,10 @@ updates:
directory: "/"
schedule:
interval: monthly
open-pull-requests-limit: 10
groups:
bundler-deps:
patterns:
- "*"
assignees:
- lopopolo
labels:
Expand Down

0 comments on commit 921aaf9

Please sign in to comment.