OSDN Git Service

Update dependabot.yml
authorNeko7sora <75793267+Neko7sora@users.noreply.github.com>
Wed, 4 Aug 2021 05:08:39 +0000 (14:08 +0900)
committerGitHub <noreply@github.com>
Wed, 4 Aug 2021 05:08:39 +0000 (14:08 +0900)
.github/dependabot.yml

index cb31e55..86798cd 100644 (file)
@@ -5,9 +5,65 @@
 
 version: 2
 updates:
-  - package-ecosystem: "" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/.github/workflows"
     schedule:
       interval: "daily"
+      time: "06:00"
+      # Use Japan Standard Time (UTC +09:00)
+      timezone: "Asia/Tokyo"
+    # Raise pull requests for version updates
+    # to github-actions against the `develop` branch
+    target-branch: "develop"
+    versioning-strategy: "auto"
+    allow:
+      # Allow updates for *
+      - dependency-name: "*"
+    # Add assignees
+    assignees:
+      - "dependabot[bot]"
+    commit-message:
+      # Prefix all commit messages with "npm"
+      prefix: "npm"
+    labels:
+      - "dependencies"
+    milestone: 1
+    # Disable version updates for npm dependencies
+    open-pull-requests-limit: 0
+    pull-request-branch-name:
+      # Separate sections of the branch name with a hyphen
+      # for example, `dependabot/npm_and_yarn/next_js/acorn/6.4.1`
+      separator: "/"
+    # Auto rebasing for npm pull requests
+    rebase-strategy: "auto" #auto <--> disabled
 
-
+  # Maintain dependencies for npm, yarn
+  - package-ecosystem: "npm"
+    directory: "/src"
+    schedule:
+      interval: "daily"
+      time: "06:00"
+      # Use Japan Standard Time (UTC +09:00)
+      timezone: "Asia/Tokyo"
+    # Raise pull requests for version updates
+    # to npm against the `develop` branch
+    target-branch: "develop"
+    versioning-strategy: "auto"
+    allow:
+      # Allow updates for *
+      - dependency-name: "*"
+    # Add assignees
+    assignees:
+      - "dependabot[bot]"
+    labels:
+      - "dependencies"
+    milestone: 1
+    # Disable version updates for npm dependencies
+    open-pull-requests-limit: 0
+    pull-request-branch-name:
+      # Separate sections of the branch name with a hyphen
+      # for example, `dependabot/npm_and_yarn/next_js/acorn/6.4.1`
+      separator: "/"
+    # Auto rebasing for npm pull requests
+    rebase-strategy: "auto" #auto <--> disabled