dependabot.yml

###############################################################
# Copyright (c) 2024 Contributors to the Eclipse Foundation
#
# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# SPDX-License-Identifier: Apache-2.0
###############################################################

---
version: 2
updates:
  # NPM
  -
    package-ecosystem: "npm"
    target-branch: dev
    directory: /
    labels:
      - "dependabot"
      - "dependencies"
    schedule:
      interval: "weekly"
    # restrict to patch updates (due to the big amount of dependencies)
    ignore:
      - dependency-name: "*"
        update-types: ["version-update:semver-major", "version-update:semver-minor"]
    groups:
      production-dependencies:
        dependency-type: "production"
      development-dependencies:
        dependency-type: "development"

  # Github Actions
  -
    package-ecosystem: "github-actions"
    target-branch: dev
    directory: /
    labels:
      - "dependabot"
      - "github-actions"
    schedule:
      interval: "weekly"
    groups:
      dependencies:
        dependency-type: "production"

  # Docker
  -
    package-ecosystem: "docker"
    target-branch: dev
    directory: ./.conf/
    labels:
      - "dependabot"
      - "docker"
    schedule:
      interval: "weekly"
    groups:
      dependencies:
        dependency-type: "production"