11version : 2
22updates :
33 - package-ecosystem : " github-actions"
4- directory : " /"
4+ # Two entries are required: "/" is the special value that scans
5+ # .github/workflows (plus any root action.yml); "/.github/actions/*"
6+ # covers the composite actions, which each have their own action.yml.
7+ directories :
8+ - " /"
9+ - " /.github/actions/*"
510 schedule :
6- interval : weekly
11+ interval : monthly
712 cooldown :
813 default-days : 7
914 groups :
@@ -15,13 +20,9 @@ updates:
1520 directories :
1621 - " /js/**"
1722 schedule :
18- interval : " weekly"
19- open-pull-requests-limit : 5
23+ interval : monthly
2024 cooldown :
2125 default-days : 7
22- semver-major-days : 30
23- semver-minor-days : 14
24- semver-patch-days : 7
2526 groups :
2627 js-minor-and-patch :
2728 update-types : ["minor", "patch"]
@@ -32,13 +33,9 @@ updates:
3233 directories :
3334 - " /python/**"
3435 schedule :
35- interval : " weekly"
36- open-pull-requests-limit : 3
36+ interval : monthly
3737 cooldown :
3838 default-days : 7
39- semver-major-days : 30
40- semver-minor-days : 14
41- semver-patch-days : 7
4239 groups :
4340 python-minor-and-patch :
4441 update-types : ["minor", "patch"]
@@ -49,13 +46,9 @@ updates:
4946 directories :
5047 - " /java/**"
5148 schedule :
52- interval : " weekly"
53- open-pull-requests-limit : 5
49+ interval : monthly
5450 cooldown :
5551 default-days : 7
56- semver-major-days : 30
57- semver-minor-days : 14
58- semver-patch-days : 7
5952 groups :
6053 java-minor-and-patch :
6154 update-types : ["minor", "patch"]
@@ -66,13 +59,9 @@ updates:
6659 directories :
6760 - " /csharp/**"
6861 schedule :
69- interval : " weekly"
70- open-pull-requests-limit : 5
62+ interval : monthly
7163 cooldown :
7264 default-days : 7
73- semver-major-days : 30
74- semver-minor-days : 14
75- semver-patch-days : 7
7665 groups :
7766 dotnet-minor-and-patch :
7867 update-types : ["minor", "patch"]
@@ -83,15 +72,125 @@ updates:
8372 directories :
8473 - " /swift/**"
8574 schedule :
86- interval : " weekly"
87- open-pull-requests-limit : 3
75+ interval : monthly
8876 cooldown :
8977 default-days : 7
90- semver-major-days : 30
91- semver-minor-days : 14
92- semver-patch-days : 7
9378 groups :
9479 swift-minor-and-patch :
9580 update-types : ["minor", "patch"]
9681 swift-major :
9782 update-types : ["major"]
83+
84+ # The blocks below mirror the ones above with target-branch: "3.8". 3.8 is a
85+ # stable release branch, so major version updates are ignored there. Dependabot
86+ # reads this config from the default branch only, and security updates always
87+ # target the default branch (they cannot be pointed at 3.8).
88+ - package-ecosystem : " github-actions"
89+ # Two entries are required: "/" is the special value that scans
90+ # .github/workflows (plus any root action.yml); "/.github/actions/*"
91+ # covers the composite actions, which each have their own action.yml.
92+ directories :
93+ - " /"
94+ - " /.github/actions/*"
95+ target-branch : " 3.8"
96+ schedule :
97+ interval : monthly
98+ cooldown :
99+ default-days : 7
100+ groups :
101+ github-actions :
102+ patterns :
103+ - " *"
104+
105+ - package-ecosystem : " npm"
106+ directories :
107+ - " /js/**"
108+ target-branch : " 3.8"
109+ schedule :
110+ interval : monthly
111+ cooldown :
112+ default-days : 7
113+ ignore :
114+ - dependency-name : " *"
115+ update-types : ["version-update:semver-major"]
116+ groups :
117+ js-minor-and-patch :
118+ update-types : ["minor", "patch"]
119+
120+ - package-ecosystem : " pip"
121+ directories :
122+ - " /python/**"
123+ target-branch : " 3.8"
124+ schedule :
125+ interval : monthly
126+ cooldown :
127+ default-days : 7
128+ ignore :
129+ - dependency-name : " *"
130+ update-types : ["version-update:semver-major"]
131+ groups :
132+ python-minor-and-patch :
133+ update-types : ["minor", "patch"]
134+
135+ - package-ecosystem : " gradle"
136+ directories :
137+ - " /java/**"
138+ target-branch : " 3.8"
139+ schedule :
140+ interval : monthly
141+ cooldown :
142+ default-days : 7
143+ ignore :
144+ - dependency-name : " *"
145+ update-types : ["version-update:semver-major"]
146+ groups :
147+ java-minor-and-patch :
148+ update-types : ["minor", "patch"]
149+
150+ - package-ecosystem : " nuget"
151+ directories :
152+ - " /csharp/**"
153+ target-branch : " 3.8"
154+ schedule :
155+ interval : monthly
156+ cooldown :
157+ default-days : 7
158+ ignore :
159+ - dependency-name : " *"
160+ update-types : ["version-update:semver-major"]
161+ groups :
162+ dotnet-minor-and-patch :
163+ update-types : ["minor", "patch"]
164+
165+ - package-ecosystem : " swift"
166+ directories :
167+ - " /swift/**"
168+ target-branch : " 3.8"
169+ schedule :
170+ interval : monthly
171+ cooldown :
172+ default-days : 7
173+ ignore :
174+ - dependency-name : " *"
175+ update-types : ["version-update:semver-major"]
176+ groups :
177+ swift-minor-and-patch :
178+ update-types : ["minor", "patch"]
179+
180+ # 3.7 is in maintenance, so only its GitHub Actions are kept up to date.
181+ - package-ecosystem : " github-actions"
182+ # Two entries are required: "/" is the special value that scans
183+ # .github/workflows (plus any root action.yml); "/.github/actions/*"
184+ # covers the composite actions, which each have their own action.yml.
185+ directories :
186+ - " /"
187+ - " /.github/actions/*"
188+ target-branch : " 3.7"
189+ schedule :
190+ interval : monthly
191+ cooldown :
192+ default-days : 7
193+ groups :
194+ github-actions :
195+ patterns :
196+ - " *"
0 commit comments