1# Dependabot are scheduled to avoid contention with normal workday CI usage. We
2# start running updates at 3AM UTC (7PM PST, 8AM IST) and stagger each
3# subsequent update by 30m.
4#
5# JS updates are run weekly.
6version: 2
7updates:
8 - package-ecosystem: "gomod"
9 directory: "/"
10 schedule:
11 interval: "daily"
12 time: "03:00"
13 timezone: "UTC"
14
15 - package-ecosystem: cargo
16 directory: "/"
17 schedule:
18 interval: daily
19 time: "03:30"
20 timezone: "UTC"
21 allow:
22 - dependency-type: "all"
23 ignore:
24 # These dependencies will be updated via higher-level aggregator dependencies like `clap`,
25 # `futures`, `kube`, `prost`, and `tracing`:
26 - dependency-name: "clap_derive"
27 - dependency-name: "futures-channel"
28 - dependency-name: "futures-core"
29 - dependency-name: "futures-io"
30 - dependency-name: "futures-sink"
31 - dependency-name: "futures-task"
32 - dependency-name: "futures-util"
33 - dependency-name: "kube-client"
34 - dependency-name: "kube-core"
35 - dependency-name: "kube-derive"
36 - dependency-name: "kube-runtime"
37 - dependency-name: "prost-derive"
38 - dependency-name: "tracing-attributes"
39 - dependency-name: "tracing-core"
40 - dependency-name: "tracing-serde"
41 # These dependencies are for platforms that we don't support:
42 - dependency-name: "redox_syscall"
43 - dependency-name: "js-sys"
44 - dependency-name: "wasm-bindgen"
45 - dependency-name: "web-sys"
46
47 - package-ecosystem: "github-actions"
48 directory: "/"
49 schedule:
50 interval: "daily"
51 time: "04:00"
52 timezone: "UTC"
53
54 - package-ecosystem: "npm"
55 directory: "/web/app"
56 schedule:
57 # JS dependencies tend to be pretty noisy, so only check once per week.
58 interval: "weekly"
59 day: "sunday"
60 ignore:
61 # v6 is backwards-incompatible and requires lots of changes.
62 # A compatibility layer should come out at some point
63 # see https://reactrouter.com/docs/en/v6/upgrading/v5
64 - dependency-name: "react-router-dom"
65 update-types: ["version-update:semver-major"]
View as plain text