codeql/.github/dependabot.yml at main · github/codeql · GitHub

History

49 lines (44 loc) · 1.05 KB

Raw

version: 2

updates:

- package-ecosystem: "cargo"

directory: "ruby"

schedule:

interval: "daily"

- package-ecosystem: "cargo"

directory: "ql"

schedule:

interval: "daily"

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "daily"

ignore:

- dependency-name: '*'

update-types: ['version-update:semver-patch', 'version-update:semver-minor']

- package-ecosystem: "gomod"

directory: "go/extractor"

schedule:

interval: "daily"

allow:

- dependency-name: "golang.org/x/mod"

- dependency-name: "golang.org/x/tools"

groups:

extractor-dependencies:

patterns:

- "golang.org/x/*"

reviewers:

- "github/codeql-go"

- package-ecosystem: "gomod"

directory: "go/ql/test"

schedule:

interval: "monthly"

ignore:

- dependency-name: "*"

reviewers:

- "github/codeql-go"

- package-ecosystem: bazel

directory: "/"

schedule:

interval: weekly

exclude-paths:

- "misc/bazel/registry/**"

codeql/.github/dependabot.yml at main · github/codeql · GitHub

Uh oh!

Expand file tree

Breadcrumbs

dependabot.yml

Latest commit

History

Breadcrumbs

dependabot.yml

File metadata and controls