From 691e1ec3cc56dbafe167858bbc8855e4d333de4a Mon Sep 17 00:00:00 2001 From: sanketd367 <40571635+sanketd367@users.noreply.github.com> Date: Mon, 20 Dec 2021 16:29:42 +0000 Subject: [PATCH] Create dependabot.yml --- .github/dependabot.yml | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..22aea32a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,37 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 +updates: +- package-ecosystem: maven + directory: "/" + schedule: + interval: daily + time: '04:00' + open-pull-requests-limit: 10 + ignore: + # ignore Maven APIs/SPIs + - dependency-name: org.apache:maven:* + # ignore Java 8+ dependencies + - dependency-name: org.mockito:mockito-core + versions: + - ">= 3.0" + - dependency-name: org.apache.commons:commons-lang3 + versions: + - ">= 3.9" + - dependency-name: commons-io:commons-io + versions: + - ">= 2.7" + # Ignore Maven 3.2.1+ + - dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-tools + versions: + - ">=3.2.0" + - dependency-name: org.apache.maven.plugin-testing:maven-plugin-testing-harness + versions: + - ">=3.2.0" +- package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily"