-
Notifications
You must be signed in to change notification settings - Fork 294
Expand file tree
/
Copy pathdependabot.yml
More file actions
42 lines (39 loc) · 942 Bytes
/
dependabot.yml
File metadata and controls
42 lines (39 loc) · 942 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
version: 2
updates:
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "weekly"
cooldown:
default-days: 7
open-pull-requests-limit: 10
groups:
build-and-release-dependencies:
# Python dependencies known to be critical to our build/release security
patterns:
- "build"
- "hatchling"
test-and-lint-dependencies:
# Python dependencies that are only pinned to ensure test reproducibility
patterns:
- "coverage"
- "mypy"
- "ruff"
- "tox"
- "zizmor"
dependencies:
# Python (developer) runtime dependencies. Also any new dependencies not
# caught by earlier groups
patterns:
- "*"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
cooldown:
default-days: 7
open-pull-requests-limit: 10
groups:
action-dependencies:
patterns:
- "*"