1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
# Keep GitHub Actions up to date with GitHub's Dependabot...
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem
version: 2
updates:
- package-ecosystem: github-actions
directory: /
groups:
github-actions:
update-types:
- "minor"
- "major"
patterns:
- "*" # Group all Actions updates into a single larger pull request
schedule:
interval: monthly
ignore:
- dependency-name: "SonarSource/sonarcloud-github-c-cpp"
# Version 3 of that task causes the scanner to throw a Java exception...
versions:
- "3.x"
- "3"
|
