CrimeLinkAnalyzer_backend/.github/dependabot.yml at 9f0f05cbe4e6753c4202ebe35f556bf53a27e242 · arosha-w/CrimeLinkAnalyzer_backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
version: 2

updates:
  # Maven / Spring Boot dependencies
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "sunday"
      time: "09:00"
    open-pull-requests-limit: 10
    rebase-strategy: "auto"

    # Group updates to reduce noise in dev
    groups:
      spring:
        patterns:
          - "org.springframework*"
          - "org.springframework.boot*"
      testing:
        patterns:
          - "org.junit*"
          - "org.mockito*"
          - "org.assertj*"
          - "org.testcontainers*"
      build-plugins:
        patterns:
          - "org.apache.maven.plugins*"
          - "io.spring.javaformat*"
          - "com.diffplug.spotless*"
          - "org.sonarsource.scanner.maven*"
      misc:
        patterns:
          - "*"

    # Avoid risky breaking changes automatically (you upgrade these intentionally)
    ignore:
      - dependency-name: "org.springframework.boot"
        update-types: ["version-update:semver-major"]
      - dependency-name: "org.springframework"
        update-types: ["version-update:semver-major"]
      - dependency-name: "org.springframework.security"
        update-types: ["version-update:semver-major"]
      - dependency-name: "org.hibernate.orm"
        update-types: ["version-update:semver-major"]

  # GitHub Actions used in workflows
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "sunday"
      time: "09:00"
    open-pull-requests-limit: 5
    rebase-strategy: "auto"