VictoriaMetrics/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
  - package-ecosystem: "gomod"
    directory: "/"
    open-pull-requests-limit: 0
  - package-ecosystem: "bundler"
    directory: "/docs"
    open-pull-requests-limit: 0
  - package-ecosystem: "gomod"
    directory: "/app/vmui/packages/vmui/web"
    open-pull-requests-limit: 0
  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "daily"
  - package-ecosystem: "npm"
    directory: "/app/vmui/packages/vmui"
    open-pull-requests-limit: 0
Revert ".github/dependabot.yml: remove automated dependency version checks" This reverts commit 5b986c95ddd9a3a5955758f7fac1d0e3d681f34b. This check verifies only dependencies needed for github-actions. This is OK. 2021-05-10 09:05:09 +00:00			`version: 2`
			`updates:`
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui 2021-08-15 11:09:34 +00:00			`- package-ecosystem: "gomod"`
			`directory: "/"`
dependabot: disable version update for packages (#4684) The change disables version updates for repo packages. Please note, security updates should not be affected by the change according to https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit: ``` open-pull-requests-limit By default, Dependabot opens a maximum of five pull requests for version updates. Once there are five open pull requests from Dependabot, Dependabot will not open any new requests until some of those open requests are merged or closed. This option has no impact on security updates, which have a separate, internal limit of ten open pull requests. ``` Signed-off-by: hagen1778 <roman@victoriametrics.com> 2023-07-21 09:08:06 +00:00			`open-pull-requests-limit: 0`
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui 2021-08-15 11:09:34 +00:00			`- package-ecosystem: "bundler"`
			`directory: "/docs"`
dependabot: disable version update for packages (#4684) The change disables version updates for repo packages. Please note, security updates should not be affected by the change according to https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit: ``` open-pull-requests-limit By default, Dependabot opens a maximum of five pull requests for version updates. Once there are five open pull requests from Dependabot, Dependabot will not open any new requests until some of those open requests are merged or closed. This option has no impact on security updates, which have a separate, internal limit of ten open pull requests. ``` Signed-off-by: hagen1778 <roman@victoriametrics.com> 2023-07-21 09:08:06 +00:00			`open-pull-requests-limit: 0`
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui 2021-08-15 11:09:34 +00:00			`- package-ecosystem: "gomod"`
			`directory: "/app/vmui/packages/vmui/web"`
github/dependabot.yml: disable versions update for vmui (#2449) The change disables versions autopupdate for vmui package. The change has no impact on security updates, which have a separate, internal limit of ten open pull requests. See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit Signed-off-by: hagen1778 <roman@victoriametrics.com> 2022-04-12 11:26:14 +00:00			`open-pull-requests-limit: 0`
add dependency chekcs for (#1535) - ruby (for docs) - gomod for monorepo - npm for vmui - gomod go small webserver in vmui 2021-08-15 11:09:34 +00:00			`- package-ecosystem: "docker"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`- package-ecosystem: "npm"`
fixed wrong path for npm dependabot checks (#1744) 2021-10-26 08:04:32 +00:00			`directory: "/app/vmui/packages/vmui"`
github/dependabot.yml: disable versions update for vmui (#2449) The change disables versions autopupdate for vmui package. The change has no impact on security updates, which have a separate, internal limit of ten open pull requests. See https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit Signed-off-by: hagen1778 <roman@victoriametrics.com> 2022-04-12 11:26:14 +00:00			`open-pull-requests-limit: 0`