From f03c70ace6bd62d63cd143ce41aa763dbb48d4b0 Mon Sep 17 00:00:00 2001
From: XOwlPost <XOfidelius@proton.me>
Date: Wed, 13 Mar 2024 21:12:24 +0100
Subject: [PATCH] Create dependabot.yml

Add npm/yarn and pip package ecosystems for daily check and auto update dependencies.

Signed-off-by: "XOwlPost" <XOfidelius@proton.me>
---
 .github/dependabot.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..aa5700fb
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,23 @@
+version: 2
+updates:
+  # JavaScript (npm/yarn) dependencies in the root directory
+  - package-ecosystem: "npm"
+    directory: "/" # Root directory where package.json and package-lock.json/yarn.lock are located
+    schedule:
+      interval: "daily"
+    # Optional: Open pull requests only for major version updates
+    allow:
+      - dependency-type: "direct"
+        update-types: ["version-update:semver-major"]
+
+  # Python (pip) dependencies in a subdirectory (e.g., 'backend/')
+  - package-ecosystem: "pip"
+    directory: "/backend/" # Directory where the Python project and its 'requirements.txt' or 'Pipfile' are located
+    schedule:
+      interval: "daily"
+    # Optional: Open pull requests for both direct and indirect (transitive) dependency updates
+    allow:
+      - dependency-type: "all"
+
+  # Add more ecosystems as needed
+  # - package-ecosystem:...