Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 11 additions & 3 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,10 +1,17 @@
version: 2
updates:
# Gradle dependencies. org.json is declared separately in sdk-java, app-java
# and app-javafx; Dependabot opens one PR per module, so check that a bump
# lands everywhere before closing the others.
# Gradle dependencies. org.json is declared separately in sdk-java, sdk-java-ui,
# app-java and app-javafx; Dependabot opens one PR per module, so check that a
# bump lands everywhere before closing the others. A bump of a published
# dependency also has to update .github/release-contract/, or the release
# checks fail.
#
# Releases are tagged on staging, so version updates target staging; master
# receives them with the next release. Security updates still open against
# master, so merge master into staging after taking one.
- package-ecosystem: gradle
directory: "/"
target-branch: staging
schedule:
interval: weekly
day: monday
Expand All @@ -16,6 +23,7 @@ updates:

- package-ecosystem: github-actions
directory: "/"
target-branch: staging
schedule:
interval: monthly
labels:
Expand Down
Loading