flask/.github/dependabot.yml
David Lord 9080b95cc8
use dependabot grouped updates
ignore upload/download-artifact until slsa updates
2024-04-06 16:43:54 -07:00

24 lines
554 B
YAML

version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: monthly
ignore:
# slsa depends on upload/download v3
- dependency-name: actions/upload-artifact
versions: '>= 4'
- dependency-name: actions/download-artifact
versions: '>= 4'
groups:
github-actions:
patterns:
- '*'
- package-ecosystem: pip
directory: /requirements/
schedule:
interval: monthly
groups:
python-requirements:
patterns:
- '*'