Merge pull request #7369 from ministryofjustice/ap-5409-dependabot-re…

…config

AP-5409: Dependabot reconfig

.github/dependabot.yml

@@ -1,56 +1,32 @@
 version: 2
 updates:
-- package-ecosystem: bundler
-  directory: "/"
-  allow:
-    - dependency-type: "all"
-  schedule:
-    interval: daily
-    time: "21:00"
-    timezone: Europe/London
-  groups:
-    aws-gems:
-      patterns:
-        - "aws-*"
-    axe-gems:
-      patterns:
-        - "axe-core-*"
-    bundling-gems:
-      patterns:
-        - "*bundling-rails"
-    rubocop-gems:
-      patterns:
-        - "rubocop-*"
-    govuk-gems:
-      patterns:
-        - "govuk*"
-  open-pull-requests-limit: 10
-  ignore:
-  - dependency-name: prometheus_exporter
-    versions:
-    - "> 0.4.17"
-  reviewers:
-  - "ministryofjustice/laa-apply-for-legal-aid"
-- package-ecosystem: npm
-  directory: "/"
-  schedule:
-    interval: weekly
-    day: wednesday
-    time: "21:15"
-    timezone: Europe/London
-  open-pull-requests-limit: 10
-  reviewers:
-  - "ministryofjustice/laa-apply-for-legal-aid"
-  groups:
-    # Specify a name for the group, which will be used in pull request titles and branch names
-    npm-babel:
-      # Define patterns to include dependencies in the group (based on # dependency name)
-      patterns:
-        - "*babel*"
-    npm-stylelint:
-      patterns:
-        - "stylelint*"
-    npm-jest:
-      # Define patterns to include dependencies in the group (based on # dependency name)
-      patterns:
-        - "jest*"
+  - package-ecosystem: "bundler"
+    directory: "/"
+    allow:
+      - dependency-type: "all"
+    schedule:
+      interval: weekly
+      day: tuesday
+      time: "21:00"
+      timezone: Europe/London
+    groups:
+      bundler:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "ministryofjustice/laa-apply-for-legal-aid"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: tuesday
+      time: "21:15"
+      timezone: Europe/London
+    groups:
+      npm:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "ministryofjustice/laa-apply-for-legal-aid"

.github/workflows/dependabot-jira.yml

@@ -0,0 +1,28 @@
+name: Create Jira Ticket
+
+on:
+  pull_request:
+    types:
+      - opened
+
+jobs:
+  create_jira_ticket:
+    runs-on: ubuntu-latest
+    if: ${{ contains(github.event.pull_request.labels.*.name, 'dependencies') }}
+
+    steps:
+      - name: Login
+        uses: atlassian/gajira-login@v3
+        env:
+          JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
+          JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
+          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+
+      - name: Create Jira Ticket
+        id: create
+        uses: atlassian/gajira-create@v3
+        with:
+          project: AP
+          issuetype: Maintenance
+          summary: "Dependabot PR in ${{ github.repository }}: ${{ github.event.pull_request.title }}"
+          description: ${{ github.event.pull_request.body }}