From 1dabc9a671538397e3bdd55e3770233b9737df14 Mon Sep 17 00:00:00 2001 From: nobe4 Date: Thu, 6 Aug 2026 15:30:08 +0200 Subject: [PATCH 1/2] auto(ln): update .github/dependabot.yml Source: https://github.com/github/sae-common-workflows/blob/main/action-ln/sae-iam/dependabot/dependabot.yml --- .github/dependabot.yml | 52 +++++++++++++++++++----------------------- 1 file changed, 23 insertions(+), 29 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f292185..0c81120 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,4 +1,6 @@ --- +# source: github/sae-common-workflows/action-ln/sae-iam/dependabot/dependabot.yml +# It's fine to have dependabot consider more languages than used in the repo. version: 2 registries: @@ -12,52 +14,44 @@ registries: url: "rubygems.pkg.github.com/github" token: "${{secrets.CONTAINER_BUILDER_TOKEN}}" +# Group all updates into a single PR +multi-ecosystem-groups: + all: + schedule: + interval: "monthly" + updates: - package-ecosystem: "bundler" + multi-ecosystem-groups: "all" vendor: true directory: "/" registries: ["rubygems-github-packages"] - groups: - ruby-gems-production: - dependency-type: "production" - patterns: ["*"] - dev-ruby-development: - dependency-type: "development" - patterns: ["*"] - schedule: - interval: "weekly" + patterns: ["*"] - package-ecosystem: "docker" + multi-ecosystem-groups: "all" directory: "/" registries: ["ghcr"] - groups: - container-images: - patterns: ["*"] - schedule: - interval: "weekly" + patterns: ["*"] - package-ecosystem: "github-actions" + multi-ecosystem-groups: "all" directory: "/" - groups: - github-actions: - patterns: ["*"] + patterns: ["*"] ignore: - dependency-name: "github/internal-actions" - schedule: - interval: "weekly" - package-ecosystem: "pip" + multi-ecosystem-groups: "all" directory: "/" - schedule: - interval: "weekly" - groups: - python-packages: - patterns: ["*"] + patterns: ["*"] - package-ecosystem: "gomod" + multi-ecosystem-groups: "all" directory: "/" - schedule: - interval: "weekly" - groups: - go-packages: - patterns: ["*"] + patterns: ["*"] + + - package-ecosystem: npm + multi-ecosystem-groups: "all" + directory: "/" + patterns: ["*"] From db81147674e6e7b7ec4f3a6786d458d62aee96c5 Mon Sep 17 00:00:00 2001 From: nobe4 Date: Thu, 6 Aug 2026 16:16:12 +0200 Subject: [PATCH 2/2] auto(ln): update .github/dependabot.yml Source: https://github.com/github/sae-common-workflows/blob/main/action-ln/sae-iam/dependabot/dependabot.yml --- .github/dependabot.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0c81120..dd1cf7a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,36 +22,36 @@ multi-ecosystem-groups: updates: - package-ecosystem: "bundler" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" vendor: true directory: "/" registries: ["rubygems-github-packages"] patterns: ["*"] - package-ecosystem: "docker" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" registries: ["ghcr"] patterns: ["*"] - package-ecosystem: "github-actions" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] ignore: - dependency-name: "github/internal-actions" - package-ecosystem: "pip" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] - package-ecosystem: "gomod" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] - package-ecosystem: npm - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"]