actions/.github/dependabot.yml

version: 2
registries:
  gradle-plugin-portal:
    type: maven-repository
    url: https://plugins.gradle.org/m2
    username: dummy # Required by dependabot
    password: dummy # Required by dependabot
updates:
  - package-ecosystem: "npm"
    directory: "/sources"
    schedule:
      interval: "weekly"
    groups:
      npm-dependencies:
        patterns:
        - "*"
      
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
        - "*"
  # github-actions with directory: "/" only monitors .github/workflows
  # https://github.com/dependabot/dependabot-core/issues/6345
  - package-ecosystem: "github-actions"
    directory: "/.github/actions/build-dist"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
          - "*"
  - package-ecosystem: "github-actions"
    directory: "/.github/actions/init-integ-test"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
          - "*"

  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/gradle-plugin"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/groovy-dsl"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/java-toolchain"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/kotlin-dsl"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/no-wrapper"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/no-wrapper-gradle-5"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
  - package-ecosystem: "gradle"
    directory: "sources/test/init-scripts"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "weekly"
Enable dependabot updates 2022-01-27 15:43:59 +00:00			`version: 2`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`gradle-plugin-portal:`
			`type: maven-repository`
			`url: https://plugins.gradle.org/m2`
			`username: dummy # Required by dependabot`
			`password: dummy # Required by dependabot`
Enable dependabot updates 2022-01-27 15:43:59 +00:00			`updates:`
Fix dependabot config for relocated NPM sources 2024-03-12 03:06:42 +00:00			`- package-ecosystem: "npm"`
			`directory: "/sources"`
			`schedule:`
			`interval: "weekly"`
			`groups:`
			`npm-dependencies:`
			`patterns:`
			`- "*"`

Enable Dependabot for github actions This will allow dependabot to provide PRs to keep GitHub Action versions up to date in all workflow files. 2023-02-20 21:41:53 +00:00			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "weekly"`
Configure grouped PRs for dependabot 2023-07-07 20:22:10 +00:00			`groups:`
			`github-actions:`
			`patterns:`
			`- "*"`
Configure Dependabot to monitor .github/actions 2024-02-19 14:24:14 +00:00			`# github-actions with directory: "/" only monitors .github/workflows`
			`# https://github.com/dependabot/dependabot-core/issues/6345`
			`- package-ecosystem: "github-actions"`
			`directory: "/.github/actions/build-dist"`
			`schedule:`
			`interval: "weekly"`
			`groups:`
			`github-actions:`
			`patterns:`
			`- "*"`
			`- package-ecosystem: "github-actions"`
Replace 'download-dist' action with 'init-integ-test' This action takes care of 'setup-java' as well as downloading the dist if required. 2024-04-06 18:52:36 +00:00			`directory: "/.github/actions/init-integ-test"`
Configure Dependabot to monitor .github/actions 2024-02-19 14:24:14 +00:00			`schedule:`
			`interval: "weekly"`
			`groups:`
			`github-actions:`
			`patterns:`
			`- "*"`
Configure grouped PRs for dependabot 2023-07-07 20:22:10 +00:00
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/gradle-plugin"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/groovy-dsl"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/java-toolchain"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/kotlin-dsl"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/no-wrapper"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/no-wrapper-gradle-5"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`
Publish build scans for test-init-script build 2022-08-26 02:18:04 +00:00			`- package-ecosystem: "gradle"`
Update workflows for move to 'sources' 2024-01-25 18:24:35 +00:00			`directory: "sources/test/init-scripts"`
Publish build scans for test-init-script build 2022-08-26 02:18:04 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
Reduce Dependabot checks to weekly 2024-08-07 13:58:19 +00:00			`interval: "weekly"`