From 765a5c3efc33ed0521dcadd94ba3a9e44e64d81f Mon Sep 17 00:00:00 2001 From: Ryan van Zeben Date: Thu, 10 Aug 2023 08:54:21 -0400 Subject: [PATCH] Add in dependabot security scanning/updates (#2743) --- dependabot.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 dependabot.yml diff --git a/dependabot.yml b/dependabot.yml new file mode 100644 index 000000000..7a31da717 --- /dev/null +++ b/dependabot.yml @@ -0,0 +1,20 @@ +version: 2 +updates: +- package-ecosystem: "docker" + directory: "/images" + schedule: + interval: "daily" + target-branch: "main" +- package-ecosystem: "nuget" + directory: "/src" + schedule: + interval: "daily" + target-branch: "main" +- package-ecosystem: "npm" + directory: "/src/Misc/expressionFunc/hashFiles" + schedule: + interval: "daily" + target-branch: "main" + allow: + - dependency-type: direct + - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli \ No newline at end of file