Merge pull request #1602 from alphagov/configure-dependabot

[PP-7685] Update Dependabot configuration

Author: AgaDufrat

.github/dependabot.yml

@@ -3,17 +3,54 @@ updates:
   - package-ecosystem: bundler
     directory: /
     schedule:
-      interval: daily
+      interval: weekly
+      day: tuesday
+      time: "07:00"
+    allow:
+      - dependency-type: direct
     ignore:
       - dependency-name: pact
         versions: [ ">=2.0.0" ]
+    cooldown:
+      default-days: 3
+    open-pull-requests-limit: 25
+    groups:
+      test:
+        patterns:
+          - "*rspec"
+          - "climate_control"
+          - "database_cleaner-*"
+          - "factory_bot*"
+          - "govuk_test"
+          - "pact"
+          - "rspec-*"
+          - "simplecov"
+          - "timecop"
+          - "webmock"
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: tuesday
+      time: "07:00"
+    cooldown:
+      default-days: 3
+    open-pull-requests-limit: 25
+
+  # Ruby needs to be upgraded manually in multiple places, so cannot
+  # be upgraded by Dependabot. That effectively makes the below
+  # config redundant, as ruby is the only updatable thing in the
+  # Dockerfile, although this may change in the future. We hope this
+  # config will save a dev from trying to upgrade ruby via Dependabot.
   - package-ecosystem: docker
     directory: /
     schedule:
       interval: weekly
+      day: tuesday
+      time: "07:00"
     ignore:
       - dependency-name: ruby
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: daily
+    cooldown:
+      default-days: 7
+    open-pull-requests-limit: 25