middleman--middleman/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: bundler
    directory: "/"
    schedule:
      interval: monthly
      time: "08:00"
      timezone: America/New_York
    open-pull-requests-limit: 10
    ignore:
      # Drops support for Ruby 2.5
      - dependency-name: pry-stack_explorer
        versions:
          - ">= 5.0"
  - package-ecosystem: github-actions
    directory: "/"
    schedule:
      interval: monthly
      time: "08:00"
      timezone: America/New_York
    open-pull-requests-limit: 10
Prep rc2 2020-08-16 15:35:31 -04:00			`version: 2`
			`updates:`
			`- package-ecosystem: bundler`
			`directory: "/"`
			`schedule:`
Try to not require ruby head 2020-12-29 12:38:28 -05:00			`interval: monthly`
Prep rc2 2020-08-16 15:35:31 -04:00			`time: "08:00"`
			`timezone: America/New_York`
			`open-pull-requests-limit: 10`
Lock pry-stack_explorer until we drop Ruby 2.5 support 2020-08-16 18:52:46 -04:00			`ignore:`
			`# Drops support for Ruby 2.5`
			`- dependency-name: pry-stack_explorer`
			`versions:`
			`- ">= 5.0"`
Included githubactions in the dependabot config (#2544) This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool 2022-04-04 20:51:53 -04:00			`- package-ecosystem: github-actions`
			`directory: "/"`
			`schedule:`
			`interval: monthly`
			`time: "08:00"`
			`timezone: America/New_York`
			`open-pull-requests-limit: 10`