Files
Bose-SoundTouch/.github/dependabot.yml
T
Tobias Gesellchen fc4ce4632f fix: Correct Dependabot configuration for valid YAML
- Remove Docker ecosystem (no Dockerfile present)
- Remove deprecated options (prefix-development, pull-request-branch-name)
- Simplify group configurations by removing redundant update-types
- Keep essential Go modules and GitHub Actions management
- Ensure proper review assignments and commit prefixes
2026-01-09 12:58:35 +01:00

80 lines
2.0 KiB
YAML

# Dependabot configuration for Bose SoundTouch Go Library
# See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Go modules dependency updates
- package-ecosystem: "gomod"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 5
reviewers:
- "user_account"
assignees:
- "user_account"
commit-message:
prefix: "deps"
include: "scope"
labels:
- "dependencies"
- "go"
rebase-strategy: "auto"
allow:
# Allow all dependency types
- dependency-type: "all"
ignore:
# Ignore major version updates for stable dependencies (manual review preferred)
- dependency-name: "github.com/gorilla/websocket"
update-types: ["version-update:semver-major"]
- dependency-name: "github.com/hashicorp/mdns"
update-types: ["version-update:semver-major"]
groups:
# Group Go standard library and toolchain updates
golang:
patterns:
- "golang.org/*"
# GitHub Actions workflow dependency updates
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "tuesday"
time: "09:00"
timezone: "UTC"
open-pull-requests-limit: 3
reviewers:
- "user_account"
assignees:
- "user_account"
commit-message:
prefix: "ci"
include: "scope"
labels:
- "dependencies"
- "github-actions"
- "ci"
rebase-strategy: "auto"
allow:
- dependency-type: "all"
groups:
# Group actions from the same organization
actions-core:
patterns:
- "actions/*"
# Group setup actions
setup-actions:
patterns:
- "*setup-*"
# Group security-related actions
security-actions:
patterns:
- "*security*"
- "*scan*"
- "securecodewarrior/*"
- "codecov/*"