mirror of
https://github.com/lima-vm/lima.git
synced 2026-10-28 11:44:35 +08:00
Jan Dubois
689a984ef1
Dependabot treats each codeql-action sub-path as its own dependency, so one upstream release opens three PRs. v4.37.2 arrived as #5351, #5352 and #5353. Signed-off-by: Jan Dubois <jan.dubois@suse.com>
32 lines
661 B
YAML
32 lines
661 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: gomod
|
|
directories:
|
|
- "/"
|
|
- "/hack/tools"
|
|
schedule:
|
|
interval: daily
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
golang-x:
|
|
patterns:
|
|
- "golang.org/x/*"
|
|
k8s:
|
|
patterns:
|
|
- "k8s.io/*"
|
|
cooldown:
|
|
default-days: 7
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: daily
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
# codeql.yaml pins init and analyze to one SHA, so bumping them apart leaves
|
|
# the workflow on two versions until the second PR merges.
|
|
codeql-action:
|
|
patterns:
|
|
- "github/codeql-action*"
|
|
cooldown:
|
|
default-days: 7
|