gson-comments/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "monthly"
    groups:
      # Name is used for branch name and pull request title
      maven:
        patterns:
        # Create a single pull request for all dependencies and plugins
        - "*"

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "monthly"
    groups:
      # Name is used for branch name and pull request title
      github-actions:
        patterns:
        # Create a single pull request for all actions
        - "*"
Create dependabot.yml 2021-05-14 01:30:52 +02:00			`version: 2`
			`updates:`
			`- package-ecosystem: "maven"`
			`directory: "/"`
			`schedule:`
Create grouped Dependabot pull requests (#2641) 2024-03-01 02:15:56 +01:00			`interval: "monthly"`
			`groups:`
			`# Name is used for branch name and pull request title`
			`maven:`
			`patterns:`
			`# Create a single pull request for all dependencies and plugins`
			`- "*"`
Upgrade GitHub actions & pin to commit hash (#2598) * Upgrade GitHub actions & pin to commit hash The only exception is `google/oss-fuzz` which does not seem to have releases or Git tags, so pinning might not make sense there. Also adds `actions/setup-java` to the `codeql-analysis` workflow to explicitly specify the JDK version to use (and to use the caching of that action) instead of relying on the default JDK of the runner image. * Enable Dependabot for GitHub actions --------- Co-authored-by: Éamonn McManus <emcmanus@google.com> 2024-01-29 18:00:13 +01:00
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
Create grouped Dependabot pull requests (#2641) 2024-03-01 02:15:56 +01:00			`interval: "monthly"`
			`groups:`
			`# Name is used for branch name and pull request title`
			`github-actions:`
			`patterns:`
			`# Create a single pull request for all actions`
			`- "*"`