gradle-build-action/.github/dependabot.yml

version: 2
registries:
  gradle-plugin-portal:
    type: maven-repository
    url: https://plugins.gradle.org/m2
    username: dummy # Required by dependabot
    password: dummy # Required by dependabot
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    groups:
      github-actions:
        patterns:
        - "*"

  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
    ignore:
      - dependency-name: "@types/node" # Breaking change: update with next major release
      - dependency-name: "@octokit/rest" # Tied to node version
    groups:
      npm-dependencies:
        patterns:
        - "*"
      
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/gradle-plugin"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/groovy-dsl"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/java-toolchain"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/kotlin-dsl"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/no-wrapper"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: ".github/workflow-samples/no-wrapper-gradle-5"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
  - package-ecosystem: "gradle"
    directory: "test/init-scripts"
    registries:
      - gradle-plugin-portal
    schedule:
      interval: "daily"
Enable dependabot updates 2022-01-27 15:43:59 +00:00			`version: 2`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`gradle-plugin-portal:`
			`type: maven-repository`
			`url: https://plugins.gradle.org/m2`
			`username: dummy # Required by dependabot`
			`password: dummy # Required by dependabot`
Enable dependabot updates 2022-01-27 15:43:59 +00:00			`updates:`
Enable Dependabot for github actions This will allow dependabot to provide PRs to keep GitHub Action versions up to date in all workflow files. 2023-02-20 21:41:53 +00:00			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "weekly"`
Configure grouped PRs for dependabot 2023-07-07 20:22:10 +00:00			`groups:`
			`github-actions:`
			`patterns:`
			`- "*"`

Enable dependabot updates 2022-01-27 15:43:59 +00:00			`- package-ecosystem: "npm"`
			`directory: "/"`
			`schedule:`
Reduce NPM dependabot updates to weekly 2022-06-14 17:30:15 +00:00			`interval: "weekly"`
Tell dependabot to ignore `@types/node` 2022-01-27 16:07:17 +00:00			`ignore:`
Add octokit to dependabot ignores 2023-08-22 16:28:15 +00:00			`- dependency-name: "@types/node" # Breaking change: update with next major release`
			`- dependency-name: "@octokit/rest" # Tied to node version`
Configure grouped PRs for dependabot 2023-07-07 20:22:10 +00:00			`groups:`
Group all npm dependencies in a single dependabot PR 2023-07-21 18:19:33 +00:00			`npm-dependencies:`
Configure grouped PRs for dependabot 2023-07-07 20:22:10 +00:00			`patterns:`
			`- "*"`

Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/gradle-plugin"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/groovy-dsl"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/java-toolchain"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/kotlin-dsl"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/no-wrapper"`
Configure dependabot to update Gradle plugins The test Gradle sample apps reference plugins, and it's good to keep these updated (particularly the GE plugin). Minor changes to the build scripts were required to satisfy Dependabot. 2022-03-18 12:14:07 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`- package-ecosystem: "gradle"`
Moved workflow samples out of `.github/workflows` The `.github/workflows` directory has additional permissions attached, preventing these files from being by the Upgrade Gradle Wrapper plugin. 2022-04-05 15:45:02 +00:00			`directory: ".github/workflow-samples/no-wrapper-gradle-5"`
Ensure all Gradle samples are checked by Dependabot 2022-04-02 17:34:54 +00:00			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`
Publish build scans for test-init-script build 2022-08-26 02:18:04 +00:00			`- package-ecosystem: "gradle"`
			`directory: "test/init-scripts"`
			`registries:`
			`- gradle-plugin-portal`
			`schedule:`
			`interval: "daily"`