Upgrade to GitHub Dependabot (#402)

* Add upgraded config files and process documentation Update legacy documentation Fix extra space on YAML Fix other space pre-commit didn't get * Remove unnecessary configs * Add back schedule.interval * Remove unnecessary configs from internal project * Update documentation * Apply suggestions from code review Co-authored-by: Claudio Jolowicz <[email protected]> * Revert .github/dependabot.yml Co-authored-by: Claudio Jolowicz <[email protected]>
cjolowicz · Jul 9, 2020 · ba98ec1 · ba98ec1
1 parent c924526
commit ba98ec1
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 40 deletions.
diff --git a/README.rst b/README.rst
@@ -222,13 +222,6 @@ Codecov
 2. Install their GitHub app.
 
 
-Dependabot
-~~~~~~~~~~
-
-1. Sign up at Dependabot_.
-2. Install their GitHub app.
-
-
 Read the Docs
 ~~~~~~~~~~~~~
 

diff --git a/docs/guide.rst b/docs/guide.rst
@@ -405,7 +405,7 @@ and links each file to a section with more details.
    ===================================== ========================================
    ``.cookiecutter.json``                :ref:`Project variables <Creating a project>`
    ``.darglint``                         Configuration for :ref:`darglint <darglint integration>`
-   ``.dependabot/config.yml``            Configuration for :ref:`Dependabot <Dependabot integration>`
+   ``.github/dependabot.yml``            Configuration for :ref:`Dependabot <Dependabot integration>`
    ``.flake8``                           Configuration for :ref:`Flake8 <The Flake8 hook>`
    ``.gitattributes``                    `Git attributes <.gitattributes_>`__
    ``.gitignore``                        `Git ignore file <.gitignore_>`__
@@ -1921,17 +1921,16 @@ Dependabot
 
 Dependabot_ creates pull requests with automated dependency updates.
 
-Follow these steps to set up Dependabot for your repository:
 
-1. Sign up at Dependabot_.
-2. Install their GitHub app.
+Please refer to the `official documentation`__ for more details.
+
+__ https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically
 
 The configuration is included in the repository,
-in the file `.dependabot/config.yml`__.
+in the file `.github/dependabot.yml`__.
 
-__ https://dependabot.com/docs/config-file/
+__ https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates
 
-Dependabot integrates with your repository via its GitHub app.
 
 It manages the following dependencies:
 

diff --git a/{{cookiecutter.project_name}}/.dependabot/config.yml b/{{cookiecutter.project_name}}/.dependabot/config.yml
diff --git a/{{cookiecutter.project_name}}/.github/dependabot.yml b/{{cookiecutter.project_name}}/.github/dependabot.yml
@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+  - package-ecosystem: pip
+    directory: "/.github/workflows"
+    schedule:
+      interval: daily
+  - package-ecosystem: pip
+    directory: "/docs"
+    schedule:
+      interval: daily
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: daily