github-mirrors/VictoriaMetrics
1
0
Fork 0
mirror of https://github.com/VictoriaMetrics/VictoriaMetrics.git synced 2024-11-21 14:44:00 +00:00
Code Issues Projects Releases Packages Wiki Activity
VictoriaMetrics/.github/dependabot.yml

31 lines
742 B
YAML
Raw Permalink Normal View History

Revert ".github/dependabot.yml: remove automated dependency version checks" This reverts commit 5b986c95ddd9a3a5955758f7fac1d0e3d681f34b. This check verifies only dependencies needed for github-actions. This is OK.
2021-05-10 09:05:09 +00:00
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui
2021-08-15 11:09:34 +00:00
- package-ecosystem: "gomod"
directory: "/"
dependabot: return `schedule` field as it breaks validation on github side Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-27 13:03:00 +00:00
schedule:
interval: "weekly"
dependabot: disable version update for packages (#4684) The change disables version updates for repo packages. Please note, security updates should not be affected by the change according to https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit: ``` open-pull-requests-limit By default, Dependabot opens a maximum of five pull requests for version updates. Once there are five open pull requests from Dependabot, Dependabot will not open any new requests until some of those open requests are merged or closed. This option has no impact on security updates, which have a separate, internal limit of ten open pull requests. ``` Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-21 09:08:06 +00:00
open-pull-requests-limit: 0
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui
2021-08-15 11:09:34 +00:00
- package-ecosystem: "bundler"
directory: "/docs"
dependabot: return `schedule` field as it breaks validation on github side Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-27 13:03:00 +00:00
schedule:
interval: "weekly"
dependabot: disable version update for packages (#4684) The change disables version updates for repo packages. Please note, security updates should not be affected by the change according to https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit: ``` open-pull-requests-limit By default, Dependabot opens a maximum of five pull requests for version updates. Once there are five open pull requests from Dependabot, Dependabot will not open any new requests until some of those open requests are merged or closed. This option has no impact on security updates, which have a separate, internal limit of ten open pull requests. ``` Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-21 09:08:06 +00:00
open-pull-requests-limit: 0
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui
2021-08-15 11:09:34 +00:00
- package-ecosystem: "gomod"
directory: "/app/vmui/packages/vmui/web"
dependabot: return `schedule` field as it breaks validation on github side Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-27 13:03:00 +00:00
schedule:
interval: "weekly"
github/dependabot.yml: disable versions update for vmui (#2449) The change disables versions autopupdate for vmui package. The change has no impact on security updates, which have a separate, internal limit of ten open pull requests. See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit Signed-off-by: hagen1778 <roman@victoriametrics.com>
2022-04-12 11:26:14 +00:00
open-pull-requests-limit: 0
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui
2021-08-15 11:09:34 +00:00
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "daily"
- package-ecosystem: "npm"
fixed wrong path for npm dependabot checks (#1744)
2021-10-26 08:04:32 +00:00
directory: "/app/vmui/packages/vmui"
dependabot: return `schedule` field as it breaks validation on github side Signed-off-by: hagen1778 <roman@victoriametrics.com>
2023-07-27 13:03:00 +00:00
schedule:
interval: "weekly"
github/dependabot.yml: disable versions update for vmui (#2449) The change disables versions autopupdate for vmui package. The change has no impact on security updates, which have a separate, internal limit of ten open pull requests. See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit Signed-off-by: hagen1778 <roman@victoriametrics.com>
2022-04-12 11:26:14 +00:00
open-pull-requests-limit: 0
Reference in a new issue Copy permalink