Files
loto/.github/dependabot.yml
T

37 lines
990 B
YAML

# Weekly update PRs for every ecosystem the repo ships. Minor and patch bumps
# are grouped into one PR per ecosystem to keep the noise down; majors still
# arrive one PR each so a breaking change can be reviewed on its own.
version: 2
updates:
- package-ecosystem: npm
directory: /web
schedule:
interval: weekly
groups:
npm-minor-patch:
update-types: [minor, patch]
# Reads android/gradle/libs.versions.toml (the version catalog) as well as
# the build scripts.
- package-ecosystem: gradle
directory: /android
schedule:
interval: weekly
groups:
gradle-minor-patch:
update-types: [minor, patch]
# "/" covers .github/workflows; the composite actions are separate
# manifests and must be listed explicitly.
- package-ecosystem: github-actions
directories:
- /
- /.github/actions/*
schedule:
interval: weekly
groups:
actions-minor-patch:
update-types: [minor, patch]