Skip to content

Commit

Permalink
Create dependabot.yml
Browse files Browse the repository at this point in the history
Add npm/yarn and pip package ecosystems for daily check and auto update dependencies.

Signed-off-by: "XOwlPost" <XOfidelius@proton.me>
  • Loading branch information
XOwlPost committed Mar 20, 2024
1 parent a9a9dd4 commit f03c70a
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
version: 2
updates:
# JavaScript (npm/yarn) dependencies in the root directory
- package-ecosystem: "npm"
directory: "/" # Root directory where package.json and package-lock.json/yarn.lock are located
schedule:
interval: "daily"
# Optional: Open pull requests only for major version updates
allow:
- dependency-type: "direct"
update-types: ["version-update:semver-major"]

# Python (pip) dependencies in a subdirectory (e.g., 'backend/')
- package-ecosystem: "pip"
directory: "/backend/" # Directory where the Python project and its 'requirements.txt' or 'Pipfile' are located
schedule:
interval: "daily"
# Optional: Open pull requests for both direct and indirect (transitive) dependency updates
allow:
- dependency-type: "all"

# Add more ecosystems as needed
# - package-ecosystem:...

0 comments on commit f03c70a

Please sign in to comment.