docs/.github/dependabot.yml at 208324af782cc3b876ec5a495d7691037d569a32 · github/docs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
version: 2

registries:
  ghcr: # Define access for a private registry
    type: docker-registry
    url: ghcr.io
    username: PAT
    password: ${{secrets.BASE_CONTAINER_IMAGE_READER_DEPENDABOT}}

updates:
  - package-ecosystem: npm
    directory: '/'
    schedule:
      interval: weekly
      day: tuesday
    ignore:
      # Because this is so dependent on the remote server we use
      - dependency-name: '@elastic/elasticsearch'
      # Because whatever we have needs to match what @primer/react also uses
      - dependency-name: 'styled-components'
      - dependency-name: '*'
        update-types:
          ['version-update:semver-patch', 'version-update:semver-minor']

  - package-ecosystem: 'github-actions'
    directory: '/'
    schedule:
      interval: weekly
      day: tuesday
    ignore:
      - dependency-name: '*'
        update-types:
          ['version-update:semver-patch', 'version-update:semver-minor']
      - dependency-name: 'github/internal-actions'

  - package-ecosystem: 'docker'
    registries:
      - ghcr
    directory: '/'
    schedule:
      interval: daily
    groups:
      baseImages:
        patterns:
          - '*'
    ignore:
      - dependency-name: 'node' # Ignore Dockerfile.openapi_decorator