chore: Configure Dependabot

szatanjl · Jan 1, 1970 · 3c1fd1c · 3c1fd1c
1 parent a9e36f4
commit 3c1fd1c
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "docker"
+    directory: "/"
+    commit-message:
+      prefix: deps(docker)
+    labels:
+      - deps
+    schedule:
+      interval: "weekly"
diff --git a/.github/settings.yml b/.github/settings.yml
@@ -16,6 +16,9 @@ repository:
   has_projects: false
   has_wiki: false
 
+  enable_automated_security_fixes: true
+  enable_vulnerability_alerts: true
+
 
 labels:
   - name: bug

diff --git a/docs/github.md b/docs/github.md
@@ -21,8 +21,13 @@ Files
 
   [Repository settings][settings]
 
+- `dependabot.yml`
+
+  [Dependabot configuration][dependabot]
+
 
 [issue-templates]: https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository
 [pr-template]: https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/creating-a-pull-request-template-for-your-repository
 [code-owners]: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
 [settings]: https://github.com/apps/settings
+[dependabot]: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file