From 671b0b7723f70037923e4f32bcd05dab1c2d371d Mon Sep 17 00:00:00 2001 From: Sven Strittmatter Date: Fri, 28 Jul 2023 12:30:17 +0200 Subject: [PATCH] Enable Dependabot for Wwrokflow updates We want to be notified if - used GitHub actions and - used baes images in the workflow are outdated. We are not sure if it will work. This is a first try. The docker ecosystem is configured globaly because we may use containers outside workflows and we hope that Dependabot searches recursive. We are also not sure if Dependabot recognizes the image tag in the workflow YAML as Docker dependency. Signed-off-by: Sven Strittmatter --- .github/dependabot.yml | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9a4d252e..9cec2c5c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,7 +5,15 @@ version: 2 updates: - - package-ecosystem: "gradle" # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: "gradle" + directory: "/" schedule: - interval: "weekly" \ No newline at end of file + interval: "weekly" + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly" + - package-ecosystem: "github-actions" + directory: "/.github/workflows" + schedule: + interval: "weekly"