From c851b020836ec3c86b83eb049b1cc125b65becce Mon Sep 17 00:00:00 2001 From: rugk Date: Wed, 1 Sep 2021 01:25:09 +0200 Subject: [PATCH] Enable Dependabot for Docker and GitHub Actions AFAIK (and this was new to me) Dependabot is not active by default. This enables it for all dependencies here (Github Actions and Docker), so it scans and suggests updates. --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..1cb3000 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,12 @@ +version: 2 +updates: + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "daily" + # Maintain dependencies for GitHub Actions + # src: https://github.com/marketplace/actions/build-and-push-docker-images#keep-up-to-date-with-github-dependabot + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily"