Files
bugsink/.github/dependabot.yml
2025-01-30 15:04:56 +01:00

32 lines
1.0 KiB
YAML

version: 2
updates:
- package-ecosystem: pip
directory: "/"
schedule:
interval: daily
time: "15:00"
groups:
python-packages:
patterns:
- "*"
ignore:
# Let's keep Django at 4.2 until a new LTS comes along
- dependency-name: "django"
versions:
- ">=5.0"
# django-tailwind 3.7 and are broken on Python 3.9: https://github.com/timonweb/django-tailwind/issues/210
- dependency-name: "django-tailwind"
versions:
- ">3.6"
# Turn off all pull requests for npm dependencies; we only use npm as a development-side
# dependency (for tailwind, the results of which we simply commit into the repo).
# This looks like a work-around ("limit: 0") but it's in fact the official way:
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates#example-disabling-version-updates-for-some-dependencies
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
open-pull-requests-limit: 0