ruby--ruby/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: 'github-actions'
    directory: '/'
    schedule:
      interval: 'weekly'
    ignore:
      # It doesn't update the version comment for us
      - dependency-name: 'necojackarc/auto-request-review'
Added dependabot configuration for actions dependencies 2022-03-24 07:31:57 -04:00			`version: 2`
			`updates:`
			`- package-ecosystem: 'github-actions'`
			`directory: '/'`
			`schedule:`
			`interval: 'weekly'`
Disable dependabot for auto-request-review for now because you have to manually update the version tag comment. It feels unsafe to trust third party git tags when you need to pass MATZBOT_GITHUB_TOKEN to it. Git commit sha alone isn't human-readable and I'm reluctant to remove the comment either. It doesn't seem worth the effort to review changes for every release of this action. 2022-10-17 01:47:49 -04:00			`ignore:`
			`# It doesn't update the version comment for us`
			`- dependency-name: 'necojackarc/auto-request-review'`