Files
openhab-addons/.github/dependabot.yml
T
2025-09-08 07:30:11 +02:00

53 lines
2.1 KiB
YAML

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference
version: 2
# this would enable querying all packages from our repo first,
# disabled for now as we do not want to use it. Kept for reference.
#registries:
# openhab-jfrog:
# type: "maven-repository"
# url: "https://openhab.jfrog.io/artifactory/libs-all/"
updates:
- package-ecosystem: "github-actions" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
open-pull-requests-limit: 10
labels:
- dependencies
- package-ecosystem: "maven" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
open-pull-requests-limit: 15
labels:
- dependencies
groups:
jacoco:
patterns:
- "*jacoco*"
ftpupload:
patterns:
- "org.apache.ftpserver:*"
- "*mina-core*"
allow:
- dependency-name: "org.apache.maven.plugins:*"
- dependency-name: "org.codehaus.mojo:*"
- dependency-name: "*jacoco*" # code coverage tool, both tool and plugin
- dependency-name: "*plugin*"
- dependency-name: "org.eclipse.jdt:ecj" # eclipse compiler
- dependency-name: "org.apache.ftpserver:*" # ftpserver
- dependency-name: "org.apache.mina:mina-core" # ftpserver
ignore:
- dependency-name: "com.github.jaxb-xew-plugin:jaxb-xew-plugin" # updated with core
- dependency-name: "com.diffplug.spotless:spotless-maven-plugin" # updated together with SAT
- dependency-name: "*graalvm*" # do not touch graalvm related stuff
- dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
- dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"