mirror of
https://github.com/middleman/middleman.git
synced 2022-11-09 12:20:27 -05:00
00e8e6e562
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
21 lines
505 B
YAML
21 lines
505 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: bundler
|
|
directory: "/"
|
|
schedule:
|
|
interval: monthly
|
|
time: "08:00"
|
|
timezone: America/New_York
|
|
open-pull-requests-limit: 10
|
|
ignore:
|
|
# Drops support for Ruby 2.5
|
|
- dependency-name: pry-stack_explorer
|
|
versions:
|
|
- ">= 5.0"
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: monthly
|
|
time: "08:00"
|
|
timezone: America/New_York
|
|
open-pull-requests-limit: 10
|