copilot-sdk/.github/dependabot.yaml at sunbrye/trigger-docs-sync · github/copilot-sdk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
version: 2
multi-ecosystem-groups:
  all:
    schedule:
      interval: 'weekly'
updates:
  - package-ecosystem: 'github-actions'
    directory: '/'
    multi-ecosystem-group: 'all'
    patterns: ['*']
    ignore:
      # gh-aw generated files — action SHAs are managed by `gh aw compile`
      # via .github/aw/actions-lock.json, not by Dependabot.
      # Dependabot's find-and-replace breaks lockfile metadata headers.
      - dependency-name: "actions/github-script"
      - dependency-name: "github/gh-aw-actions"
  - package-ecosystem: 'devcontainers'
    directory: '/'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  # Node.js dependencies
  - package-ecosystem: 'npm'
    directory: '/nodejs'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  - package-ecosystem: 'npm'
    directory: '/test/harness'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  # Python dependencies
  - package-ecosystem: 'pip'
    directory: '/python'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  # Go dependencies
  - package-ecosystem: 'gomod'
    directory: '/go'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  # .NET dependencies
  - package-ecosystem: 'nuget'
    directory: '/dotnet'
    multi-ecosystem-group: 'all'
    patterns: ['*']
  # Java dependencies
  - package-ecosystem: 'maven'
    directory: '/java'
    schedule:
      interval: 'weekly'
    ignore:
      # Major version bumps often drop Java 17 support or have breaking
      # API changes. These must be evaluated and applied manually.
      - dependency-name: "*"
        update-types: ["version-update:semver-major"]
    groups:
      java-maven-deps:
        patterns:
          - "*"
  # Java codegen dependencies
  - package-ecosystem: 'npm'
    directory: '/java/scripts/codegen'
    schedule:
      interval: 'weekly'
    groups:
      java-codegen-deps:
        patterns:
          - "*"