FilesExpand file tree

main

/

dependabot.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

40 lines (38 loc) · 1.22 KB

main

/

dependabot.yml

Copy path

Top

File metadata and controls

• Code
• Blame

40 lines (38 loc) · 1.22 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

version: 2

updates:

- package-ecosystem: "maven"

directory: "/"

schedule:

interval: "monthly"

groups:

dependencies:

patterns:

- "*"

ignore:

# Both are capped by the JDK baseline: Error Prone 2.32 and NullAway 0.13 dropped

# JDK 11, so any bump breaks the build. Newer JDKs pick up newer versions via profile.

- dependency-name: "com.google.errorprone:error_prone_core"

- dependency-name: "com.uber.nullaway:nullaway"

- dependency-name: "org.junit:junit-bom"

update-types: ["version-update:semver-major"]

- dependency-name: "org.apache.tomcat.embed:tomcat-embed-core"

update-types: ["version-update:semver-major"]

- dependency-name: "org.mockito:mockito-core"

update-types: ["version-update:semver-major"]

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "monthly"

groups:

actions:

patterns:

- "*"

# "/" only covers .github/workflows, so the composite action needs its own entry.

- package-ecosystem: "github-actions"

directory: "/.github/actions/setup-maven"

schedule:

interval: "monthly"

groups:

actions:

patterns:

- "*"