dependabot.yml 3.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192
  1. version: 2
  2. registries:
  3. spring-milestones:
  4. type: maven-repository
  5. url: https://repo.spring.io/milestone
  6. updates:
  7. - package-ecosystem: "gradle"
  8. target-branch: "main"
  9. milestone: 319 # 6.2.x
  10. directory: "/"
  11. schedule:
  12. interval: "daily"
  13. time: "03:00"
  14. timezone: "Etc/UTC"
  15. labels: [ "type: dependency-upgrade" ]
  16. registries:
  17. - "spring-milestones"
  18. ignore:
  19. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  20. - dependency-name: "org.python:jython" # jython updates break integration tests
  21. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  22. - dependency-name: "org.junit:junit-bom"
  23. update-types: [ "version-update:semver-major" ]
  24. - dependency-name: "org.mockito:mockito-bom"
  25. update-types: [ "version-update:semver-major" ]
  26. - dependency-name: "*"
  27. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  28. - package-ecosystem: "gradle"
  29. target-branch: "6.1.x"
  30. milestone: 318 # 6.1.x
  31. directory: "/"
  32. schedule:
  33. interval: "daily"
  34. time: "03:00"
  35. timezone: "Etc/UTC"
  36. labels: [ "type: dependency-upgrade" ]
  37. ignore:
  38. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  39. - dependency-name: "org.python:jython" # jython updates break integration tests
  40. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  41. - dependency-name: "org.junit:junit-bom"
  42. update-types: [ "version-update:semver-major" ]
  43. - dependency-name: "org.mockito:mockito-bom"
  44. update-types: [ "version-update:semver-major" ]
  45. - dependency-name: "*"
  46. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  47. - package-ecosystem: "gradle"
  48. target-branch: "6.0.x"
  49. milestone: 143 # 6.0.x
  50. directory: "/"
  51. schedule:
  52. interval: "daily"
  53. time: "03:00"
  54. timezone: "Etc/UTC"
  55. labels: [ "type: dependency-upgrade" ]
  56. ignore:
  57. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  58. - dependency-name: "org.python:jython" # jython updates break integration tests
  59. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  60. - dependency-name: "org.junit:junit-bom"
  61. update-types: [ "version-update:semver-major" ]
  62. - dependency-name: "org.mockito:mockito-bom"
  63. update-types: [ "version-update:semver-major" ]
  64. - dependency-name: "*"
  65. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]
  66. - package-ecosystem: "gradle"
  67. target-branch: "5.8.x"
  68. milestone: 246 # 5.8.x
  69. directory: "/"
  70. schedule:
  71. interval: "daily"
  72. time: "03:00"
  73. timezone: "Etc/UTC"
  74. labels: [ "type: dependency-upgrade" ]
  75. ignore:
  76. - dependency-name: "com.nimbusds:nimbus-jose-jwt" # nimbus-jose-jwt gets updated when oauth2-oidc-sdk is updated to ensure consistency
  77. - dependency-name: "org.python:jython" # jython updates break integration tests
  78. - dependency-name: "org.apache.directory.server:*" # ApacheDS version > 1.5.5 contains break changes
  79. - dependency-name: "io.mockk:mockk" # mockk updates break tests
  80. - dependency-name: "org.opensaml:*" # org.opensaml maintains two different versions, so it must be updated manually
  81. - dependency-name: "org.junit:junit-bom"
  82. update-types: [ "version-update:semver-major" ]
  83. - dependency-name: "org.mockito:mockito-bom"
  84. update-types: [ "version-update:semver-major" ]
  85. - dependency-name: "*"
  86. update-types: [ "version-update:semver-major", "version-update:semver-minor" ]