# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: - package-ecosystem: "gitsubmodule" directory: "/" schedule: interval: "weekly" - package-ecosystem: "gomod" directory: "/" schedule: interval: "weekly" ignore: - dependency-name: "github.com/mudler/LocalAI/pkg/grpc/proto" - package-ecosystem: "github-actions" # Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.) directory: "/" schedule: # Check for updates to GitHub Actions every weekday interval: "weekly" - package-ecosystem: "pip" # Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.) directory: "/" schedule: # Check for updates to GitHub Actions every weekday interval: "weekly" - package-ecosystem: "docker" # Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.) directory: "/" schedule: # Check for updates to GitHub Actions every weekday interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/bark" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/common/template" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/coqui" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/diffusers" schedule: interval: "weekly" # torch and transformers are deliberately pinned in this backend (see # backend/python/diffusers/requirements-*.txt and issue #9979), and the # l4t12 variant resolves them from the Jetson pip index # (https://pypi.jetson-ai-lab.io/jp6/cu129/). dependabot cannot authenticate # against that index and fails the whole weekly update with a # private_source_authentication_failure. Ignore the two pinned deps we don't # want bumped anyway so the job stays green. ignore: - dependency-name: "torch" - dependency-name: "transformers" - package-ecosystem: "pip" directory: "/backend/python/exllama" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/exllama2" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/mamba" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/openvoice" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/rerankers" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/sentencetransformers" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/transformers" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/backend/python/vllm" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/examples/chainlit" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/examples/functions" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/examples/langchain/langchainpy-localai-example" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/examples/langchain-chroma" schedule: interval: "weekly" - package-ecosystem: "pip" directory: "/examples/streamlit-bot" schedule: interval: "weekly" - package-ecosystem: "docker" directory: "/examples/k8sgpt" schedule: interval: "weekly" - package-ecosystem: "docker" directory: "/examples/kubernetes" schedule: interval: "weekly" - package-ecosystem: "docker" directory: "/examples/langchain" schedule: interval: "weekly" - package-ecosystem: "gomod" directory: "/examples/semantic-todo" schedule: interval: "weekly" - package-ecosystem: "docker" directory: "/examples/telegram-bot" schedule: interval: "weekly"