FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
cpython/.github/dependabot.yml at main · sethmlarson/cpython · GitHub
sethmlarson
cpython
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
Expand file tree
Breadcrumbs
cpython
/
.github
/
dependabot.yml
Copy path
More file actions
More file actions
Latest commit
History
History
History
156 lines (145 loc) · 3.71 KB
Breadcrumbs
cpython
/
.github
/
dependabot.yml
Copy path
File metadata and controls
156 lines (145 loc) · 3.71 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
version
:
2
updates
:
-
package-ecosystem
:
"
github-actions
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
-
"
skip issue
"
-
"
skip news
"
groups
:
actions
:
patterns
:
-
"
*
"
cooldown
:
#
https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
#
Cooldowns protect against supply chain attacks by avoiding the
#
highest-risk window immediately after new releases.
default-days
:
14
-
package-ecosystem
:
"
pip
"
directory
:
"
/Tools/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
pip
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
npm
"
directory
:
"
/Platforms/emscripten/browser_test/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["OS-emscripten", "skip issue", "skip news"]
groups
:
npm
:
patterns
:
["*"]
cooldown
:
default-days
:
14
#
Release branches: Dependabot only reads this file from the default
#
branch, so each branch that should get its own actions bumps needs an
#
entry here with `target-branch`. Add one when a new release branch is
#
created, and remove when the branch reaches end-of-life.
-
package-ecosystem
:
"
github-actions
"
target-branch
:
"
3.15
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
actions
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
github-actions
"
target-branch
:
"
3.14
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
actions
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
github-actions
"
target-branch
:
"
3.13
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
actions
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
github-actions
"
target-branch
:
"
3.12
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
actions
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
github-actions
"
target-branch
:
"
3.11
"
directory
:
"
/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
actions
:
patterns
:
["*"]
cooldown
:
default-days
:
14
#
Only bump bugfix branches for pip. Remove
#
the entry when branch goes security-only.
-
package-ecosystem
:
"
pip
"
target-branch
:
"
3.15
"
directory
:
"
/Tools/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
pip
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
pip
"
target-branch
:
"
3.14
"
directory
:
"
/Tools/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["skip issue", "skip news"]
groups
:
pip
:
patterns
:
["*"]
cooldown
:
default-days
:
14
#
Only bump bugfix branches for npm. Remove
#
the entry when branch goes security-only.
-
package-ecosystem
:
"
npm
"
target-branch
:
"
3.15
"
directory
:
"
/Platforms/emscripten/browser_test/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["OS-emscripten", "skip issue", "skip news"]
groups
:
npm
:
patterns
:
["*"]
cooldown
:
default-days
:
14
-
package-ecosystem
:
"
npm
"
target-branch
:
"
3.14
"
directory
:
"
/Platforms/emscripten/browser_test/
"
schedule
:
interval
:
"
quarterly
"
labels
:
["OS-emscripten", "skip issue", "skip news"]
groups
:
npm
:
patterns
:
["*"]
cooldown
:
default-days
:
14
Back
|
FazBrowse Home
|
New Git URL