microsoft/mu_tiano_platforms

Public

mirrored fromhttps://github.com/microsoft/mu_tiano_platformsAvailable

CodeCommitsIssuesPull requestsActionsInsightsSecurity
main

Branches

Tags

  • No tags available.
0Branches0Tags
Go to file
Add file
Code

Clone

HTTPS

Download ZIP

.github/dependabot.yml

121lines · modepreview

## @file
# Dependabot configuration file to enable GitHub services for managing and updating
# dependencies.
#
# This dependabot configuration expects submodules to be placed in specific directory paths
# relative to the root of the repo. These are also the paths generally recommended to place
# these submodules for consistency across Project Mu projects.
#
# NOTE: This file is automatically synchronized from Mu DevOps. Update the original file there
#       instead of the file in this repo.
#
#       This dependabot file is limited to syncing the following type of dependencies. Other files
#       are already available in Mu DevOps to sync other dependency types.
#         - Rust Crate Dependencies (`cargo`)
#         - GitHub Actions (`github-actions`)
#         - Git Submodules (`gitsubmodule`)
#         - Python PIP Modules (`pip`)
#
#       Dependabot does not update the microsoft/mu_devops version because that is updated once in mu_devops
#       and then synced to all repos when the file sync occurs.
#
# - Mu DevOps Repo: https://github.com/microsoft/mu_devops
# - File Sync Settings: https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml
#
# Copyright (c) Microsoft Corporation.
# SPDX-License-Identifier: BSD-2-Clause-Patent
#
# Please see the documentation for all dependabot configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
##

version: 2

updates:
  - package-ecosystem: "cargo"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      timezone: "America/Los_Angeles"
      time: "03:00"
    commit-message:
      prefix: "Rust Dependency"
    labels:
      - "type:dependencies"
      - "type:dependabot"
    rebase-strategy: "disabled"

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      timezone: "America/Los_Angeles"
      time: "06:00"
    ignore:
      # Ignore dependencies that are synced from mu_devops
      - dependency-name: "microsoft/mu_devops*"
      - dependency-name: "github/codeql-action*"
    groups:
      all-actions-dependencies:
        patterns:
          - "*"
    commit-message:
      prefix: "GitHub Action"
    labels:
      - "type:dependencies"
      - "type:dependabot"
    rebase-strategy: "disabled"

  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "tuesday"
      timezone: "America/Los_Angeles"
      time: "23:00"
    groups:
      all-submodule-dependencies:
        patterns:
          - "*"
    labels:
      - "type:submodules"
      - "type:dependencies"
    rebase-strategy: "disabled"
    ignore:
      - dependency-name: "Common/MIN_PLAT"
      - dependency-name: "Common/MU_BASECORE"
      - dependency-name: "Common/MU_OEM_SAMPLE"
      - dependency-name: "Common/MU_TIANO"
      - dependency-name: "Common/MU"
      - dependency-name: "Features/CONFIG"
      - dependency-name: "Features/DEBUGGER"
      - dependency-name: "Features/DFCI"
      - dependency-name: "Features/IPMI"
      - dependency-name: "Features/MM_SUPV"
      - dependency-name: "Features/FFA"
      - dependency-name: "MU_BASECORE"
      - dependency-name: "Silicon/Arm/MU_TIANO"
      - dependency-name: "Silicon/Intel/MU_TIANO"
      - dependency-name: "Silicon/Arm/HAF"
      - dependency-name: "Silicon/Arm/TFA"

  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "wednesday"
      timezone: "America/Los_Angeles"
      time: "01:00"
    groups:
      all-pip-dependencies:
        patterns:
          - "*"
    commit-message:
      prefix: "pip"
    labels:
      - "language:python"
      - "type:dependencies"
      - "type:dependabot"
    rebase-strategy: "disabled"