dependabot.yml 3.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980
  1. version: 2
  2. updates:
  3. - package-ecosystem: "gradle"
  4. target-branch: "main"
  5. milestone: 319 # 6.2.x
  6. directory: "/"
  7. schedule:
  8. interval: "daily"
  9. time: "03:00"
  10. timezone: "Etc/UTC"
  11. labels: [ "type: dependency-upgrade" ]
  12. ignore:
  13. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  14. - dependency-name: "org.python:jython" # jython updates break integration tests
  15. - dependency-name: "org.junit:junit-bom"
  16. update-types: [ "version-update:semver-major" ]
  17. - dependency-name: "org.mockito:mockito-bom"
  18. update-types: [ "version-update:semver-major" ]
  19. - dependency-name: "*"
  20. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  21. - package-ecosystem: "gradle"
  22. target-branch: "6.1.x"
  23. milestone: 318 # 6.1.x
  24. directory: "/"
  25. schedule:
  26. interval: "daily"
  27. time: "03:00"
  28. timezone: "Etc/UTC"
  29. labels: [ "type: dependency-upgrade" ]
  30. ignore:
  31. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  32. - dependency-name: "org.python:jython" # jython updates break integration tests
  33. - dependency-name: "org.junit:junit-bom"
  34. update-types: [ "version-update:semver-major" ]
  35. - dependency-name: "org.mockito:mockito-bom"
  36. update-types: [ "version-update:semver-major" ]
  37. - dependency-name: "*"
  38. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  39. - package-ecosystem: "gradle"
  40. target-branch: "6.0.x"
  41. milestone: 143 # 6.0.x
  42. directory: "/"
  43. schedule:
  44. interval: "daily"
  45. time: "03:00"
  46. timezone: "Etc/UTC"
  47. labels: [ "type: dependency-upgrade" ]
  48. ignore:
  49. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  50. - dependency-name: "org.python:jython" # jython updates break integration tests
  51. - dependency-name: "org.junit:junit-bom"
  52. update-types: [ "version-update:semver-major" ]
  53. - dependency-name: "org.mockito:mockito-bom"
  54. update-types: [ "version-update:semver-major" ]
  55. - dependency-name: "*"
  56. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  57. - package-ecosystem: "gradle"
  58. target-branch: "5.8.x"
  59. milestone: 246 # 5.8.x
  60. directory: "/"
  61. schedule:
  62. interval: "daily"
  63. time: "03:00"
  64. timezone: "Etc/UTC"
  65. labels: [ "type: dependency-upgrade" ]
  66. ignore:
  67. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  68. - dependency-name: "org.python:jython" # jython updates break integration tests
  69. - dependency-name: "io.mockk:mockk" # mockk updates break tests
  70. - dependency-name: "org.opensaml:*" # org.opensaml maintains two different versions, so it must be updated manually
  71. - dependency-name: "org.junit:junit-bom"
  72. update-types: [ "version-update:semver-major" ]
  73. - dependency-name: "org.mockito:mockito-bom"
  74. update-types: [ "version-update:semver-major" ]
  75. - dependency-name: "*"
  76. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]