Define the composer dependabot configuration

benmatselby · Feb 3, 2024 · 40bad60 · 40bad60
1 parent 4a8576e
commit 40bad60
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,3 +1,4 @@
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 version: 2
 updates:
   # Maintain dependencies for GitHub Actions
@@ -45,3 +46,16 @@ updates:
     groups:
       development-dependencies:
         dependency-type: 'development'
+
+  # Maintain dependencies for PHP
+  - package-ecosystem: 'composer'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    commit-message:
+      prefix: 'php'
+    groups:
+      development-dependencies:
+        dependency-type: 'development'
+      production-dependencies:
+        dependency-type: 'production'