mirror of
https://github.com/edera-dev/krata.git
synced 2025-08-02 21:00:55 +00:00
2462a99fdc
We have a need to ensure great security while also ensuring that dependabot does not constantly provide multiple PRs. After all, when something becomes too time consuming it risks not being handled with care. With grouped updates, version bumps will get grouped together, but security updates will still be indvidualized. This makes it safer for us to enable grouped dependency updates.
19 lines
381 B
YAML
19 lines
381 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "daily"
|
|
groups:
|
|
version-updates:
|
|
dependency-type: "all"
|
|
applies-to: "version-updates"
|
|
- package-ecosystem: "cargo"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "daily"
|
|
groups:
|
|
version-updates:
|
|
dependency-type: "all"
|
|
applies-to: "version-updates"
|