Merge pull request #1670 from c9s/narumi/dependabot

Create .github/dependabot.yml
This commit is contained in:
c9s 2024-07-28 16:22:13 +08:00 committed by GitHub
commit 869385b403
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

27
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,27 @@
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
commit-message:
prefix: "dep"
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "weekly"
commit-message:
prefix: "dep"
# Create pull requests only for security updates
open-pull-requests-limit: 0
- package-ecosystem: "npm"
directories:
- "/apps/backtest-report"
- "/apps/frontend"
schedule:
interval: "weekly"
commit-message:
prefix: "dep"
open-pull-requests-limit: 0