From de52620e518c8167d5e5ec1e15ec355db75ac6d8 Mon Sep 17 00:00:00 2001 From: Michael Kreil Date: Thu, 28 Nov 2024 16:37:20 +0100 Subject: [PATCH] ci: weekly security audits --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index befed757..8ebe0e82 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,9 +1,22 @@ version: 2 updates: + # Weekly security audits + - package-ecosystem: cargo + directory: / + schedule: { interval: weekly } + open-pull-requests-limit: 0 + + - package-ecosystem: github-actions + directory: / + schedule: { interval: weekly } + open-pull-requests-limit: 0 + + # Monthly regular updates - package-ecosystem: cargo directory: / schedule: { interval: monthly } groups: { npm: { patterns: ['*'] } } + - package-ecosystem: github-actions directory: / schedule: { interval: monthly }