diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..a66473676 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,30 @@ +# Inspired by: https://github.com/dependabot/dependabot-core/blob/main/.github/dependabot.yml +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + dev-symfony-and-webpack-dependencies: + dependency-type: "development" + patterns: + - "@symfony/*" + - "webpack*" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + - package-ecosystem: "composer" + groups: + php: + applies-to: security-updates + update-types: + - "minor" + - "patch"