summaryrefslogtreecommitdiff
path: root/.github/dependabot.yml
Commit message (Collapse)AuthorAgeFilesLines
* Auto-merge feature for dependabot PRs (#7300)Hiroshi SHIBATA2023-02-161-1/+1
| | | | | | | | | * Automerge for dependabot update * change update period with daily, we can merge it automatically when `make check` of Ubuntu was passed * Use rebase instead of merge commit * check all Ubuntu jobs
* Change the dependabot interval to monthlyTakashi Kokubun2022-12-041-1/+1
| | | | It's not that important for ruby/ruby to keep them up to date.
* Try to let dependabot maintain the version commentTakashi Kokubun2022-11-141-3/+0
| | | | | | | It seems like dependabot supports updating the `# vX.Y.Z` comment. The reason why I disabled this was that it failed to update this, but maybe it was because it had `, checking sha`. Let me try it again with that removed.
* Disable dependabot for auto-request-review for nowTakashi Kokubun2022-10-161-0/+3
| | | | | | | | because you have to manually update the version tag comment. It feels unsafe to trust third party git tags when you need to pass MATZBOT_GITHUB_TOKEN to it. Git commit sha alone isn't human-readable and I'm reluctant to remove the comment either. It doesn't seem worth the effort to review changes for every release of this action.
* Added dependabot configuration for actions dependenciesHiroshi SHIBATA2022-03-241-0/+6