add .github/dependabot.yml

This attempts to group all security related fixes for docs/ gems
into one PR on a monthly basis.
This commit is contained in:
James Zern 2024-04-17 12:45:41 -07:00 committed by GitHub
parent 7d58126d07
commit 459a76b574
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

14
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,14 @@
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
- package-ecosystem: "bundler"
directory: "/doc" # Location of package manifests
schedule:
interval: "monthly"
groups:
doc-gems-security:
applies-to: "security-updates"
patterns:
- "*"