dependabot.yml 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384
  1. version: 2
  2. updates:
  3. - package-ecosystem: "gradle"
  4. target-branch: "main"
  5. milestone: 319 # 6.2.x
  6. directory: "/"
  7. schedule:
  8. interval: "daily"
  9. time: "03:00"
  10. timezone: "Etc/UTC"
  11. labels: [ "type: dependency-upgrade" ]
  12. ignore:
  13. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  14. - dependency-name: "org.python:jython" # jython updates break integration tests
  15. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  16. - dependency-name: "org.junit:junit-bom"
  17. update-types: [ "version-update:semver-major" ]
  18. - dependency-name: "org.mockito:mockito-bom"
  19. update-types: [ "version-update:semver-major" ]
  20. - dependency-name: "*"
  21. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  22. - package-ecosystem: "gradle"
  23. target-branch: "6.1.x"
  24. milestone: 318 # 6.1.x
  25. directory: "/"
  26. schedule:
  27. interval: "daily"
  28. time: "03:00"
  29. timezone: "Etc/UTC"
  30. labels: [ "type: dependency-upgrade" ]
  31. ignore:
  32. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  33. - dependency-name: "org.python:jython" # jython updates break integration tests
  34. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  35. - dependency-name: "org.junit:junit-bom"
  36. update-types: [ "version-update:semver-major" ]
  37. - dependency-name: "org.mockito:mockito-bom"
  38. update-types: [ "version-update:semver-major" ]
  39. - dependency-name: "*"
  40. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  41. - package-ecosystem: "gradle"
  42. target-branch: "6.0.x"
  43. milestone: 143 # 6.0.x
  44. directory: "/"
  45. schedule:
  46. interval: "daily"
  47. time: "03:00"
  48. timezone: "Etc/UTC"
  49. labels: [ "type: dependency-upgrade" ]
  50. ignore:
  51. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  52. - dependency-name: "org.python:jython" # jython updates break integration tests
  53. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  54. - dependency-name: "org.junit:junit-bom"
  55. update-types: [ "version-update:semver-major" ]
  56. - dependency-name: "org.mockito:mockito-bom"
  57. update-types: [ "version-update:semver-major" ]
  58. - dependency-name: "*"
  59. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  60. - package-ecosystem: "gradle"
  61. target-branch: "5.8.x"
  62. milestone: 246 # 5.8.x
  63. directory: "/"
  64. schedule:
  65. interval: "daily"
  66. time: "03:00"
  67. timezone: "Etc/UTC"
  68. labels: [ "type: dependency-upgrade" ]
  69. ignore:
  70. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  71. - dependency-name: "org.python:jython" # jython updates break integration tests
  72. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  73. - dependency-name: "io.mockk:mockk" # mockk updates break tests
  74. - dependency-name: "org.opensaml:*" # org.opensaml maintains two different versions, so it must be updated manually
  75. - dependency-name: "org.junit:junit-bom"
  76. update-types: [ "version-update:semver-major" ]
  77. - dependency-name: "org.mockito:mockito-bom"
  78. update-types: [ "version-update:semver-major" ]
  79. - dependency-name: "*"
  80. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]