From 807532d3c1ec452873bdd5f9692d2a3491a82c6c Mon Sep 17 00:00:00 2001 From: nobe4 Date: Thu, 6 Aug 2026 15:41:52 +0200 Subject: [PATCH 1/2] auto(ln): update .github/dependabot.yml Source: https://github.com/github/sae-common-workflows/blob/main/action-ln/sae-iam/dependabot/dependabot.yml --- .github/dependabot.yml | 68 +++++++++++++++++++++++++++++++----------- 1 file changed, 51 insertions(+), 17 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 57083fe9..0c811203 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,23 +1,57 @@ --- +# source: github/sae-common-workflows/action-ln/sae-iam/dependabot/dependabot.yml +# It's fine to have dependabot consider more languages than used in the repo. version: 2 + +registries: + ghcr: + type: "docker-registry" + url: "ghcr.io" + username: "PAT" + password: "${{secrets.CONTAINER_BUILDER_TOKEN}}" + rubygems-github-packages: + type: "rubygems-server" + url: "rubygems.pkg.github.com/github" + token: "${{secrets.CONTAINER_BUILDER_TOKEN}}" + +# Group all updates into a single PR +multi-ecosystem-groups: + all: + schedule: + interval: "monthly" + updates: - - package-ecosystem: github-actions + - package-ecosystem: "bundler" + multi-ecosystem-groups: "all" + vendor: true directory: "/" - cooldown: - default-days: 45 - groups: - github-actions: - patterns: - - "*" - schedule: - interval: monthly + registries: ["rubygems-github-packages"] + patterns: ["*"] + + - package-ecosystem: "docker" + multi-ecosystem-groups: "all" + directory: "/" + registries: ["ghcr"] + patterns: ["*"] + + - package-ecosystem: "github-actions" + multi-ecosystem-groups: "all" + directory: "/" + patterns: ["*"] + ignore: + - dependency-name: "github/internal-actions" + + - package-ecosystem: "pip" + multi-ecosystem-groups: "all" + directory: "/" + patterns: ["*"] + + - package-ecosystem: "gomod" + multi-ecosystem-groups: "all" + directory: "/" + patterns: ["*"] + - package-ecosystem: npm + multi-ecosystem-groups: "all" directory: "/" - cooldown: - default-days: 90 - groups: - npm-dependencies: - patterns: - - "*" - schedule: - interval: monthly + patterns: ["*"] From a26f0e01427b6b9763f132198ee0e45c87b173d1 Mon Sep 17 00:00:00 2001 From: nobe4 Date: Thu, 6 Aug 2026 16:18:15 +0200 Subject: [PATCH 2/2] auto(ln): update .github/dependabot.yml Source: https://github.com/github/sae-common-workflows/blob/main/action-ln/sae-iam/dependabot/dependabot.yml --- .github/dependabot.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0c811203..dd1cf7a5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,36 +22,36 @@ multi-ecosystem-groups: updates: - package-ecosystem: "bundler" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" vendor: true directory: "/" registries: ["rubygems-github-packages"] patterns: ["*"] - package-ecosystem: "docker" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" registries: ["ghcr"] patterns: ["*"] - package-ecosystem: "github-actions" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] ignore: - dependency-name: "github/internal-actions" - package-ecosystem: "pip" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] - package-ecosystem: "gomod" - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"] - package-ecosystem: npm - multi-ecosystem-groups: "all" + multi-ecosystem-group: "all" directory: "/" patterns: ["*"]