From 596a7dbdd930d7ec83584c96e7e7256d0a7f1d31 Mon Sep 17 00:00:00 2001 From: Robert McNees <86265089+robertmcnees@users.noreply.github.com> Date: Wed, 12 Jun 2024 07:07:26 -0400 Subject: [PATCH] Create dependabot config file Most dependencies should exclude updating patch release versions. The dependencies are specified explicitly in the Gradle builds in order to allow patch updates from io.spring.dependency-management to be included. --- .github/dependabot.yml | 41 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..09eac2cc --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,41 @@ +version: 2 +updates: + - package-ecosystem: "maven" + directory: "/initial/" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-patch"] + schedule: + interval: "monthly" + target-branch: "main" + + - package-ecosystem: "gradle" + directory: "/initial/" + ignore: + - dependency-name: "org.springframework.*" + update-types: ["version-update:semver-patch"] + - dependency-name: "com.vaadin.*" + update-types: ["version-update:semver-patch"] + schedule: + interval: "monthly" + target-branch: "main" + + - package-ecosystem: "maven" + directory: "/complete/" + ignore: + - dependency-name: "*" + update-types: ["version-update:semver-patch"] + schedule: + interval: "monthly" + target-branch: "main" + + - package-ecosystem: "gradle" + directory: "/complete/" + ignore: + - dependency-name: "org.springframework.*" + update-types: ["version-update:semver-patch"] + - dependency-name: "com.vaadin.*" + update-types: ["version-update:semver-patch"] + schedule: + interval: "monthly" + target-branch: "main"