add .github/dependabot.yml (#1060)

* add .github/dependabot.yml

This attempts to group all security related fixes for docs/ gems
into one PR on a monthly basis.

* clear yamllint warnings

ignoring 'document-start'
This commit is contained in:
James Zern 2024-05-08 10:10:58 -07:00 committed by GitHub
parent 7d58126d07
commit 91ab336d3d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

13
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,13 @@
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
- package-ecosystem: "bundler"
directory: "/doc"
schedule:
interval: "monthly"
groups:
doc-gems-security:
applies-to: "security-updates"
patterns:
- "*"