diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c9bfd79 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,16 @@ +version: 2 +registries: + npm-github: + type: npm-registry + url: https://npm.pkg.github.com + token: ${{secrets.STAFFBOT_NPM_READ}} + +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + labels: + - "dependencies" + registries: + - npm-github diff --git a/.github/workflows/dependency-update.yml b/.github/workflows/dependency-update.yml deleted file mode 100644 index b6e585a..0000000 --- a/.github/workflows/dependency-update.yml +++ /dev/null @@ -1,24 +0,0 @@ -name: Dependency Update - -on: - schedule: - - cron: "0 12 * * 3" # every Wednesday at 12pm UTC - workflow_dispatch: - -env: - NPM_TOKEN: ${{ secrets.STAFFBOT_NPM_READ }} - GITHUB_TOKEN: ${{ secrets.STAFFBOT_GITHUB_TOKEN }} - -jobs: - npm-audit-fix: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v2 - with: - persist-credentials: false - - uses: Staffbase/npm-audit-fix-action@v3.3.0 - with: - github_token: ${{ secrets.STAFFBOT_GITHUB_TOKEN }} - github_user: "Staffbot" - github_email: "staffbot@staffbase.com" - labels: "dependencies, javascript, security, dev" diff --git a/README.MD b/README.md similarity index 100% rename from README.MD rename to README.md