Skip to content

Commit

Permalink
Merge pull request #316 from jiridanek/v1.7-branch
Browse files Browse the repository at this point in the history
chore: add Dependabot configuration file
  • Loading branch information
openshift-merge-bot[bot] authored Apr 17, 2024
2 parents 54b65e1 + ada83b1 commit 4bc5b76
Showing 1 changed file with 32 additions and 0 deletions.
32 changes: 32 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
# https://docs.github.com/en/code-security/dependabot
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
commit-message:
prefix: "chore(gha)"

# only open security update PRs (see linked docs for explanation of `open-pull-requests-limit: 0`)
# https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#overriding-the-default-behavior-with-a-configuration-file
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit

# security PRs need to be further enabled in the repository settings
# https://docs.github.com/en/code-security/dependabot/dependabot-auto-triage-rules/customizing-auto-triage-rules-to-prioritize-dependabot-alerts

- package-ecosystem: "gomod"
open-pull-requests-limit: 0
directory: "/components/notebook-controller"
schedule:
interval: "weekly"
commit-message:
prefix: "fix(deps)"

- package-ecosystem: "gomod"
open-pull-requests-limit: 0
directory: "/components/odh-notebook-controller"
schedule:
interval: "weekly"
commit-message:
prefix: "fix(deps)"

0 comments on commit 4bc5b76

Please sign in to comment.