Stirling-PDF/.github/dependabot.yml
Ludy87 a0117f9789
Update dependencies and workflows for security and features
This commit updates several dependency versions in requirements and pre-commit config files, adds new package schedules to dependabot.yml, pins GitHub Actions to specific commit SHAs for improved security, and streamlines Python dependency installation in CI workflows. Also adds tomli-w to requirements for TOML file syncing and updates testing/cucumber dependencies for compatibility.
2025-12-04 21:41:44 +01:00

59 lines
1.4 KiB
YAML

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
version: 2
updates:
- package-ecosystem: "gradle" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
open-pull-requests-limit: 10
rebase-strategy: "auto"
- package-ecosystem: "docker"
directory: "/" # Location of Dockerfile
schedule:
interval: "weekly"
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
- package-ecosystem: npm
directory: /devTools
schedule:
interval: "weekly"
- package-ecosystem: docker
directory: /docker/backend
schedule:
interval: "weekly"
- package-ecosystem: docker
directory: /docker/embedded
schedule:
interval: "weekly"
- package-ecosystem: docker
directory: /docker/frontend
schedule:
interval: "weekly"
- package-ecosystem: npm
directory: /frontend
schedule:
interval: "weekly"
- package-ecosystem: cargo
directory: /frontend/src-tauri
schedule:
interval: "weekly"
- package-ecosystem: pip
directory: /testing/cucumber
schedule:
interval: "weekly"