diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..2e723bfff --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,41 @@ +version: 2 +updates: + # Monitor GitHub Actions dependencies + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "02:00" + timezone: "UTC" + open-pull-requests-limit: 5 + reviewers: + - "xixu-me" + assignees: + - "xixu-me" + commit-message: + prefix: "ci" + include: "scope" + labels: + - "dependencies" + - "github-actions" + + # Monitor pip dependencies (for tzst package used in workflow) + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "02:30" + timezone: "UTC" + open-pull-requests-limit: 3 + reviewers: + - "xixu-me" + assignees: + - "xixu-me" + commit-message: + prefix: "deps" + include: "scope" + labels: + - "dependencies" + - "python"