dependabot.yml 1.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758
  1. version: 2
  2. updates:
  3. - package-ecosystem: "maven"
  4. directory: "/"
  5. schedule:
  6. interval: "weekly"
  7. day: "monday"
  8. time: "06:00"
  9. timezone: "Etc/UTC"
  10. ignore:
  11. - dependency-name: "org.cryptomator:integrations-api"
  12. versions: ["2.0.0-alpha1"]
  13. - dependency-name: "jakarta.inject:jakarta.inject-api"
  14. versions: ["2.0.1.MR"]
  15. - dependency-name: "org.openjfx:*"
  16. update-types: ["version-update:semver-major"]
  17. groups:
  18. java-test-dependencies:
  19. patterns:
  20. - "org.junit.jupiter:*"
  21. - "org.mockito:*"
  22. - "org.hamcrest:*"
  23. - "com.google.jimfs:jimfs"
  24. maven-build-plugins:
  25. patterns:
  26. - "org.apache.maven.plugins:*"
  27. - "org.jacoco:jacoco-maven-plugin"
  28. - "org.owasp:dependency-check-maven"
  29. - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
  30. - "org.codehaus.mojo:license-maven-plugin"
  31. javafx:
  32. patterns:
  33. - "org.openjfx:*"
  34. java-production-dependencies:
  35. patterns:
  36. - "*"
  37. exclude-patterns:
  38. - "org.openjfx:*"
  39. - "org.apache.maven.plugins:*"
  40. - "org.jacoco:jacoco-maven-plugin"
  41. - "org.owasp:dependency-check-maven"
  42. - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
  43. - "org.codehaus.mojo:license-maven-plugin"
  44. - "org.junit.jupiter:*"
  45. - "org.mockito:*"
  46. - "org.hamcrest:*"
  47. - "com.google.jimfs:jimfs"
  48. - package-ecosystem: "github-actions"
  49. directory: "/" # even for `.github/workflows`
  50. schedule:
  51. interval: "monthly"
  52. groups:
  53. github-actions:
  54. patterns:
  55. - "*"
  56. labels:
  57. - "misc:ci"