From 83c33f1686ab899baa1ef68e3091c6e1e346e252 Mon Sep 17 00:00:00 2001
From: Kai Lueke <kailuke@microsoft.com>
Date: Mon, 11 Dec 2023 19:56:06 +0100
Subject: [PATCH] dependabot: Add required config file

The config file seems to be needed now. It's also useful to limit the
PRs in-flight with "open-pull-requests-limit: 0" if we get too many PRs
at once.

Suggested by @mkilchhofer
---
 dependabot.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 dependabot.yml

diff --git a/dependabot.yml b/dependabot.yml
new file mode 100644
index 000000000..fc628bfd0
--- /dev/null
+++ b/dependabot.yml
@@ -0,0 +1,26 @@
+## Reference: https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: "monday"
+
+  - package-ecosystem: "npm"
+    directory: "/frontend"
+    schedule:
+      interval: "daily"
+      day: "monday"
+
+  - package-ecosystem: "gomod"
+    directory: "/backend"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+
+  - package-ecosystem: "gomod"
+    directory: "/updater"
+    schedule:
+      interval: "weekly"
+      day: "monday"