mirror of
https://github.com/loot/libloot.git
synced 2026-07-27 14:16:01 -07:00
Oliver Hamlet
6f0ee77994
So that Dependabot won't open PRs for updates that are less than 7 days old, to reduce the risk of getting caught up in supply chain attacks. The use of cargo-vet already prevents CI builds from passing with un-vetted dependency versions, but this should save a little effort for Python and Node.js dependencies. Cooldowns aren't supported for GitHub Actions dependencies.
30 lines
459 B
YAML
30 lines
459 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: cargo
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: uv
|
|
directories:
|
|
- /docs
|
|
- /python
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: npm
|
|
directory: /nodejs
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|