## @file # Dependabot configuration file to enable GitHub services for managing and updating # dependencies. # # NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there # instead of the file in this repo. # # This dependabot file is limited to syncing the following type of dependencies. Other files # are already available in Mu DevOps to sync other dependency types. # - Rust Crate Dependencies (`cargo`) # - GitHub Actions (`github-actions`) # - Python PIP Modules (`pip`) # # Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops # and then synced to all repos when the file sync occurs. # # - Mu DevOps Repo: https://github.com/microsoft/mu_devops # - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml # # Copyright (c) Microsoft Corporation. # SPDX-License-Identifier: BSD-2-Clause-Patent # # Please see the documentation for all dependabot configuration options: # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates ## version: 2 updates: - package-ecosystem: "cargo" directory: "/" schedule: interval: "weekly" day: "monday" timezone: "America/Los_Angeles" time: "03:00" commit-message: prefix: "Rust Dependency" labels: - "type:dependencies" - "type:dependabot" rebase-strategy: "disabled" - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" day: "monday" timezone: "America/Los_Angeles" time: "06:00" ignore: # Ignore dependencies that are synced from mu_devops - dependency-name: "microsoft/mu_devops*" - dependency-name: "github/codeql-action*" groups: all-actions-dependencies: patterns: - "*" commit-message: prefix: "GitHub Action" labels: - "type:dependencies" - "type:dependabot" rebase-strategy: "disabled" - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" day: "wednesday" timezone: "America/Los_Angeles" time: "01:00" groups: all-pip-dependencies: patterns: - "*" commit-message: prefix: "pip" labels: - "language:python" - "type:dependencies" - "type:dependabot" rebase-strategy: "disabled"