# Dependabot are scheduled to avoid contention with normal workday CI usage. We # start running updates at 3AM UTC (7PM PST, 8AM IST) and stagger each # subsequent update by 30m. # # JS updates are run weekly. version: 2 updates: - package-ecosystem: "gomod" directory: "/" schedule: interval: "daily" time: "03:00" timezone: "UTC" - package-ecosystem: cargo directory: "/" schedule: interval: daily time: "03:30" timezone: "UTC" allow: - dependency-type: "all" ignore: # These dependencies will be updated via higher-level aggregator dependencies like `clap`, # `futures`, `kube`, `prost`, and `tracing`: - dependency-name: "clap_derive" - dependency-name: "futures-channel" - dependency-name: "futures-core" - dependency-name: "futures-io" - dependency-name: "futures-sink" - dependency-name: "futures-task" - dependency-name: "futures-util" - dependency-name: "kube-client" - dependency-name: "kube-core" - dependency-name: "kube-derive" - dependency-name: "kube-runtime" - dependency-name: "prost-derive" - dependency-name: "tracing-attributes" - dependency-name: "tracing-core" - dependency-name: "tracing-serde" # These dependencies are for platforms that we don't support: - dependency-name: "redox_syscall" - dependency-name: "js-sys" - dependency-name: "wasm-bindgen" - dependency-name: "web-sys" - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" time: "04:00" timezone: "UTC" - package-ecosystem: "npm" directory: "/web/app" schedule: # JS dependencies tend to be pretty noisy, so only check once per week. interval: "weekly" day: "sunday" ignore: # v6 is backwards-incompatible and requires lots of changes. # A compatibility layer should come out at some point # see https://reactrouter.com/docs/en/v6/upgrading/v5 - dependency-name: "react-router-dom" update-types: ["version-update:semver-major"]