diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f43a340..ffaf2bf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,11 +2,34 @@ version: 2 updates: - package-ecosystem: "pip" directory: "/" + target-branch: "main" + groups: + pip-security-updates: + applies-to: "security-updates" + patterns: + - "*" schedule: - interval: "weekly" - ignore: - - dependency-name: "*" - update-types: [ "version-update:semver-patch", "version-update:semver-minor" ] + interval: "daily" labels: - "patch" - - "dependencies" \ No newline at end of file + - "dependencies" + open-pull-requests-limit: 0 + +# Update GitHub actions in workflows + - package-ecosystem: github-actions + directory: / + # Every week + schedule: + interval: weekly + + labels: + - "patch" + - "dependencies" + + groups: + # Group updates into fewer pull requests + gh-security-updates: + applies-to: security-updates + patterns: + - "*" + open-pull-requests-limit: 0 \ No newline at end of file