Files
kopia/.github/dependabot.yml

50 lines
1.4 KiB
YAML

version: 2
updates:
- package-ecosystem: gomod
directory: "/"
open-pull-requests-limit: 5
schedule:
interval: weekly
ignore:
# htmluibuild is explicitly updated by us
- dependency-name: "github.com/kopia/htmluibuild"
groups:
# create large PR upgrading multiple infrastructure dependencies in one shot,
# only include upstream dependencies that are stable and have somewhat
# regular releases which would be otherwise hard to manually manage.
common-golang-dependencies:
patterns:
- "cloud.google.com/*"
- "github.com/aws/aws-sdk-go/*"
- "github.com/Azure/azure-sdk-for-go/sdk/*"
- "github.com/minio/minio-go/*"
- "golang.org/x/*"
- "google.golang.org/*"
telemetry-dependencies:
patterns:
- "github.com/prometheus/*"
- "go.opentelemetry.io/*"
- package-ecosystem: github-actions
directory: "/"
open-pull-requests-limit: 5
schedule:
interval: monthly
groups:
github-actions:
patterns:
- "actions/*"
- "github/codeql-action"
docker:
patterns:
- "docker/*"
- package-ecosystem: npm
directory: "/app"
schedule:
interval: monthly
groups:
# create once-per-week PR for all KopiaUI dependency bumps, that usually includes
# electron, electron-builder, etc.
kopia-ui-npm-dependencies:
patterns:
- "*"