7eb623c035
This will delay non security dependabot updates to packages, giving automated tools and researchers more time to catch updates with malicious intent, thus reducing the supply chain security risks. Signed-off-by: Thomas Stranger <thomas.stranger@outlook.com>
31 lines
562 B
YAML
31 lines
562 B
YAML
version: 2
|
|
enable-beta-ecosystems: true
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
commit-message:
|
|
prefix: "ci: github: "
|
|
labels: []
|
|
groups:
|
|
actions-deps:
|
|
patterns:
|
|
- "*"
|
|
|
|
- package-ecosystem: "uv"
|
|
directory: "/doc"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
commit-message:
|
|
prefix: "ci: doc: "
|
|
labels: []
|
|
groups:
|
|
doc-deps:
|
|
patterns:
|
|
- "*"
|