Add Dependabot configuration (#13)

Introduces .github/dependabot.yml to automate dependency updates for GitHub Actions and Docker, scheduling checks monthly and limiting minor/patch updates for built-in actions.
This commit is contained in:
Ian Bassi
2025-11-25 16:20:59 -03:00
committed by GitHub
parent a050cab5ba
commit c74456539d

18
.github/dependabot.yml vendored Normal file
View File

@@ -0,0 +1,18 @@
version: 2
updates:
# Only care about major updates to github actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
ignore: # Only suggest major updates for built-in actions
- dependency-name: "github/*"
update-types: ["version-update:semver-patch", "version-update:semver-minor"]
- dependency-name: "actions/*"
update-types: ["version-update:semver-patch", "version-update:semver-minor"]
# Docker dependencies
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "monthly"
# no support for c/cpp