From 459a76b574d4396558470708b85efda5ffeea3f3 Mon Sep 17 00:00:00 2001 From: James Zern Date: Wed, 17 Apr 2024 12:45:41 -0700 Subject: [PATCH] add .github/dependabot.yml This attempts to group all security related fixes for docs/ gems into one PR on a monthly basis. --- .github/dependabot.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..b4c268c --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,14 @@ +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "bundler" + directory: "/doc" # Location of package manifests + schedule: + interval: "monthly" + groups: + doc-gems-security: + applies-to: "security-updates" + patterns: + - "*" +