Skip to content

Commit e05a904

Browse files
ZahnentfernerZahnentferner
authored
Merge pull request #5 from kpj2006/dependabot
add dependabot
2 parents 7f83590 + 524ed84 commit e05a904

1 file changed

Lines changed: 264 additions & 0 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 264 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,264 @@
1+
# Dependabot Configuration for Multi-Domain Projects
2+
# Documentation: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
3+
4+
# ============================================================================
5+
# CUSTOMIZATION GUIDE
6+
# ============================================================================
7+
# 1. Remove package ecosystems not used in your project (e.g., if no Java, remove maven & gradle)
8+
# 2. Update "directory" if dependencies are in subdirectories (e.g., "/backend", "/frontend")
9+
# 3. Adjust "schedule" timing based on your team's workflow
10+
# 4. Set "open-pull-requests-limit" based on your review capacity (default: 5)
11+
# 5. Add reviewers/assignees if needed:
12+
# reviewers:
13+
# - "username" # Individual GitHub user
14+
# - "org/team-name" # Organization team
15+
# assignees:
16+
# - "username"
17+
# 6. Customize labels to match your project's labeling system
18+
# 7. Use "ignore" to exclude specific dependencies or update types
19+
# 8. For monorepos, duplicate sections with different "directory" values
20+
# ============================================================================
21+
22+
version: 2
23+
updates:
24+
# NPM - JavaScript/Node.js projects
25+
# Remove this section if your project doesn't use npm
26+
- package-ecosystem: "npm"
27+
directory: "/" # Change to "/frontend" or "/backend" for monorepos
28+
schedule:
29+
interval: "weekly" # Options: daily, weekly, monthly
30+
day: "monday" # For weekly: monday-sunday
31+
time: "09:00" # UTC time
32+
open-pull-requests-limit: 5 # Max PRs to keep open
33+
labels:
34+
- "dependencies"
35+
- "npm"
36+
commit-message:
37+
prefix: "chore(deps)" # Follows conventional commits
38+
include: "scope"
39+
pull-request-branch-name:
40+
separator: "-" # Creates branches like: dependabot/npm-package-name
41+
42+
# GitHub Actions - Keep workflows up to date (recommended for all projects)
43+
- package-ecosystem: "github-actions"
44+
directory: "/" # Scans .github/workflows/
45+
schedule:
46+
interval: "weekly"
47+
day: "monday"
48+
time: "09:00"
49+
open-pull-requests-limit: 5
50+
labels:
51+
- "dependencies"
52+
- "github-actions"
53+
commit-message:
54+
prefix: "chore(deps)"
55+
include: "scope"
56+
pull-request-branch-name:
57+
separator: "-"
58+
59+
# Docker - Containerized applications
60+
# Remove this section if your project doesn't use Docker
61+
- package-ecosystem: "docker"
62+
directory: "/" # Directory containing Dockerfile
63+
schedule:
64+
interval: "weekly"
65+
day: "monday"
66+
time: "09:00"
67+
open-pull-requests-limit: 5
68+
labels:
69+
- "dependencies"
70+
- "docker"
71+
commit-message:
72+
prefix: "chore(deps)"
73+
include: "scope"
74+
pull-request-branch-name:
75+
separator: "-"
76+
77+
# Bundler - Ruby projects
78+
# Remove this section if your project doesn't use Ruby
79+
- package-ecosystem: "bundler"
80+
directory: "/"
81+
schedule:
82+
interval: "weekly"
83+
day: "monday"
84+
time: "09:00"
85+
open-pull-requests-limit: 5
86+
labels:
87+
- "dependencies"
88+
- "ruby"
89+
commit-message:
90+
prefix: "chore(deps)"
91+
include: "scope"
92+
pull-request-branch-name:
93+
separator: "-"
94+
95+
# Cargo - Rust projects
96+
# Remove this section if your project doesn't use Rust
97+
- package-ecosystem: "cargo"
98+
directory: "/"
99+
schedule:
100+
interval: "weekly"
101+
day: "monday"
102+
time: "09:00"
103+
open-pull-requests-limit: 5
104+
labels:
105+
- "dependencies"
106+
- "rust"
107+
commit-message:
108+
prefix: "chore(deps)"
109+
include: "scope"
110+
pull-request-branch-name:
111+
separator: "-"
112+
113+
# Maven - Java projects
114+
# Remove this section if your project uses Gradle instead or doesn't use Java
115+
- package-ecosystem: "maven"
116+
directory: "/"
117+
schedule:
118+
interval: "weekly"
119+
day: "monday"
120+
time: "09:00"
121+
open-pull-requests-limit: 5
122+
labels:
123+
- "dependencies"
124+
- "java"
125+
commit-message:
126+
prefix: "chore(deps)"
127+
include: "scope"
128+
pull-request-branch-name:
129+
separator: "-"
130+
131+
# Gradle - Java/Kotlin/Android projects
132+
# Remove this section if your project uses Maven instead or doesn't use Java/Kotlin
133+
- package-ecosystem: "gradle"
134+
directory: "/"
135+
schedule:
136+
interval: "weekly"
137+
day: "monday"
138+
time: "09:00"
139+
open-pull-requests-limit: 5
140+
labels:
141+
- "dependencies"
142+
- "java"
143+
commit-message:
144+
prefix: "chore(deps)"
145+
include: "scope"
146+
pull-request-branch-name:
147+
separator: "-"
148+
149+
# Composer - PHP projects
150+
# Remove this section if your project doesn't use PHP
151+
- package-ecosystem: "composer"
152+
directory: "/"
153+
schedule:
154+
interval: "weekly"
155+
day: "monday"
156+
time: "09:00"
157+
open-pull-requests-limit: 5
158+
labels:
159+
- "dependencies"
160+
- "php"
161+
commit-message:
162+
prefix: "chore(deps)"
163+
include: "scope"
164+
pull-request-branch-name:
165+
separator: "-"
166+
167+
# Go Modules - Go projects
168+
# Remove this section if your project doesn't use Go
169+
- package-ecosystem: "gomod"
170+
directory: "/"
171+
schedule:
172+
interval: "weekly"
173+
day: "monday"
174+
time: "09:00"
175+
open-pull-requests-limit: 5
176+
labels:
177+
- "dependencies"
178+
- "go"
179+
commit-message:
180+
prefix: "chore(deps)"
181+
include: "scope"
182+
pull-request-branch-name:
183+
separator: "-"
184+
185+
# Pip - Python projects (supports pip, pipenv, poetry)
186+
# Remove this section if your project doesn't use Python
187+
- package-ecosystem: "pip"
188+
directory: "/" # Directory containing requirements.txt, Pipfile, or pyproject.toml
189+
schedule:
190+
interval: "weekly"
191+
day: "monday"
192+
time: "09:00"
193+
open-pull-requests-limit: 5
194+
labels:
195+
- "dependencies"
196+
- "python"
197+
commit-message:
198+
prefix: "chore(deps)"
199+
include: "scope"
200+
pull-request-branch-name:
201+
separator: "-"
202+
# Uncomment and customize for AI/ML projects to prevent breaking changes:
203+
# ignore:
204+
# - dependency-name: "tensorflow"
205+
# update-types: ["version-update:semver-major"]
206+
# - dependency-name: "torch"
207+
# update-types: ["version-update:semver-major"]
208+
# - dependency-name: "scikit-learn"
209+
# update-types: ["version-update:semver-major"]
210+
211+
# Terraform - Infrastructure as Code
212+
# Remove this section if your project doesn't use Terraform
213+
- package-ecosystem: "terraform"
214+
directory: "/" # Directory containing .tf files
215+
schedule:
216+
interval: "weekly"
217+
day: "monday"
218+
time: "09:00"
219+
open-pull-requests-limit: 5
220+
labels:
221+
- "dependencies"
222+
- "infrastructure"
223+
commit-message:
224+
prefix: "chore(deps)"
225+
include: "scope"
226+
pull-request-branch-name:
227+
separator: "-"
228+
229+
# Pub - Dart/Flutter projects
230+
# Remove this section if your project doesn't use Dart/Flutter
231+
- package-ecosystem: "pub"
232+
directory: "/"
233+
schedule:
234+
interval: "weekly"
235+
day: "monday"
236+
time: "09:00"
237+
open-pull-requests-limit: 5
238+
labels:
239+
- "dependencies"
240+
- "flutter"
241+
- "dart"
242+
commit-message:
243+
prefix: "chore(deps)"
244+
include: "scope"
245+
pull-request-branch-name:
246+
separator: "-"
247+
248+
# NuGet - .NET projects (C#, F#, VB.NET)
249+
# Remove this section if your project doesn't use .NET
250+
- package-ecosystem: "nuget"
251+
directory: "/"
252+
schedule:
253+
interval: "weekly"
254+
day: "monday"
255+
time: "09:00"
256+
open-pull-requests-limit: 5
257+
labels:
258+
- "dependencies"
259+
- "dotnet"
260+
commit-message:
261+
prefix: "chore(deps)"
262+
include: "scope"
263+
pull-request-branch-name:
264+
separator: "-"

0 commit comments

Comments
 (0)