diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e7b394d2..c81f4757 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,29 +1,26 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates - -#version: 2 -#updates: -# - package-ecosystem: "" # See documentation for possible values -# directory: "/" # Location of package manifests -# schedule: -# interval: "weekly" +# Basic `dependabot.yml` file with +# minimum configuration for two package managers version: 2 updates: - - package-ecosystem: "github-actions" + # Enable version updates for npm + - package-ecosystem: "npm" + # Look for `package.json` and `lock` files in the `root` directory directory: "/" + # Check the npm registry for updates every day (weekdays) schedule: - # Check for updates to GitHub Actions every weekday - interval: "weekly" + interval: "daily" + commit-message: + prefix: "[info](sec) npm:" - - package-ecosystem: bundler - directory: / + # Enable version updates for Ruby + - package-ecosystem: "bundler" + # Look for `Ruby Gems` in the following directories + directories: + - "/" + - "_plugins" + # Check for updates once a week schedule: - interval: daily - - - package-ecosystem: npm - directory: / - schedule: - interval: daily + interval: "weekly" + commit-message: + prefix: "[info](sec) bundler:"