From a0077ee147a8f1c26bd699d8dc45e0a6abde2c7e Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Wed, 28 Apr 2021 16:45:37 +0000 Subject: [PATCH 1/2] Upgrade to GitHub-native Dependabot --- .github/dependabot.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000..a111f8ee8f --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,23 @@ +version: 2 +updates: +- package-ecosystem: pip + directory: "/" + schedule: + interval: daily + time: "00:00" + timezone: Europe/Paris + open-pull-requests-limit: 2 + reviewers: + - Morendil + - fpagnoux + - sandcha + - maukoquiroga + labels: + - kind:improvement + ignore: + - dependency-name: flake8-bugbear + versions: + - ">= 20.1.1.a, < 20.1.2" + - dependency-name: numpy + versions: + - ">= 1.18.a, < 1.19" From 6de033d73a6564eb7fa0abc1ced03019dfa120a1 Mon Sep 17 00:00:00 2001 From: Matti Schneider Date: Thu, 7 Oct 2021 16:30:29 +0200 Subject: [PATCH 2/2] Check dependencies on a monthly basis --- .github/dependabot.yml | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a111f8ee8f..fcb2acc162 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,21 +3,6 @@ updates: - package-ecosystem: pip directory: "/" schedule: - interval: daily - time: "00:00" - timezone: Europe/Paris - open-pull-requests-limit: 2 - reviewers: - - Morendil - - fpagnoux - - sandcha - - maukoquiroga + interval: monthly labels: - - kind:improvement - ignore: - - dependency-name: flake8-bugbear - versions: - - ">= 20.1.1.a, < 20.1.2" - - dependency-name: numpy - versions: - - ">= 1.18.a, < 1.19" + - kind:dependencies