corso/.github/dependabot.yml
Dhruv Patel 813b719951
add dependabot support for npm and go dependencies (#1347)
## Description

Adds dependabot support to `corso/src` (go). 
Adds dependabot support to `corso/website` (npm). 
Adds dependabot support to `corso/docs` (npm). 

Adds dependabot support to `corso` for actions as well.  

Warning that dependabot emails can get noisy so everyone may need to add
email rules/update repository notifications 😭

~PR limit of `5` here to test and we can increase as needed.~ Working
well in `ark`. Increased to 50 w/ auto-merge.

## Type of change

Please check the type of change your PR introduces:
- [ ] 🌻 Feature
- [ ] 🐛 Bugfix
- [ ] 🗺️ Documentation
- [ ] 🤖 Test
- [ ] 🐹 Trivial/Minor
- [x] 💰 Tech Debt

## Linear Issue(s)
<!-- use one of the following "magic words" - "closes, fixes" to link to
the Linear issue. Can reference multiple issues-->

- Fixes ALC-541

## Test Plan
Merge and see what happens (no way to currently test dependabot config).

<!-- How will this be tested prior to merging.-->

- [ ] 💪 Manual
- [ ]  Unit test
- [ ] 💚 E2E
- [x]  TEST IN PROD 👀
2022-10-31 09:55:35 -04:00

40 lines
1005 B
YAML

# See: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
reviewers:
- "corso-maintainers"
open-pull-requests-limit: 50
# Maintain dependencies for npm - website
- package-ecosystem: "npm"
directory: "website/"
schedule:
interval: "daily"
reviewers:
- "corso-maintainers"
open-pull-requests-limit: 50
# Maintain dependencies for npm - docs
- package-ecosystem: "npm"
directory: "docs/"
schedule:
interval: "daily"
reviewers:
- "corso-maintainers"
open-pull-requests-limit: 50
# Maintain dependencies for go - src
- package-ecosystem: "gomod"
directory: "src/"
schedule:
interval: "daily"
reviewers:
- "corso-maintainers"
open-pull-requests-limit: 50