dependabot.template.yml 1.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. version: 2
  2. registries:
  3. spring-milestones:
  4. type: maven-repository
  5. url: https://repo.spring.io/milestone
  6. updates:
  7. - package-ecosystem: "gradle"
  8. target-branch: "main"
  9. directory: "/"
  10. schedule:
  11. interval: "daily"
  12. time: "03:00"
  13. timezone: "Etc/UTC"
  14. labels: [ "type: dependency-upgrade" ]
  15. registries:
  16. - "spring-milestones"
  17. ignore:
  18. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  19. - dependency-name: "org.python:jython" # jython updates break integration tests
  20. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  21. - dependency-name: "org.junit:junit-bom"
  22. update-types: [ "version-update:semver-major" ]
  23. - dependency-name: "org.mockito:mockito-bom"
  24. update-types: [ "version-update:semver-major" ]
  25. - dependency-name: "*"
  26. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  27. # GitHub Actions
  28. - package-ecosystem: github-actions
  29. target-branch: "main"
  30. directory: "/"
  31. schedule:
  32. interval: weekly
  33. ignore:
  34. - dependency-name: "spring-io/*"
  35. - dependency-name: "spring-security-release-tools/*"