FilesExpand file tree

main

/

dependabot.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

32 lines (32 loc) · 1.13 KB

main

/

dependabot.yml

Copy path

Top

File metadata and controls

• Code
• Blame

32 lines (32 loc) · 1.13 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

version: 2

updates:

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "weekly"

day: "sunday"

groups:

# CodeQL fails unless init and analyze run the exact same version, so

# they have to be bumped together in a single pull request.

codeql-action:

patterns:

- "github/codeql-action*"

# Every reusable workflow we call from supabase/sdk shares that

# repository's release tags, so they always move in lockstep.

supabase-sdk-workflows:

patterns:

- "supabase/sdk*"

# Same story for the reusable workflows we call from supabase/actions,

# which are all pinned to a single commit of that repository.

supabase-actions-workflows:

patterns:

- "supabase/actions*"

# Everything else that cannot break a workflow on its own, batched into a

# single pull request. Major bumps deliberately match no group so they

# still arrive individually and get reviewed on their own.

actions-minor-patch:

patterns:

- "*"

update-types:

- "minor"

- "patch"