zebra/.github/dependabot.yml

56 lines
1.4 KiB
YAML

version: 2
updates:
# Rust section
- package-ecosystem: cargo
directory: '/'
# serde, clap, and other dependencies sometimes have multiple updates in a week
schedule:
interval: weekly
day: monday
timezone: America/New_York
# Limit dependabot to 1 PR per reviewer
open-pull-requests-limit: 6
labels:
- 'C-trivial'
- 'A-rust'
- 'A-dependencies'
- 'P-Low :snowflake:'
groups:
ecc:
patterns:
# deliberately include zcash_script (even though it is maintained by ZF)
- "zcash_*"
- "orchard"
- "halo2*"
- "incrementalmerkletree"
- "bridgetree"
- "equihash"
prod:
dependency-type: "production"
exclude-patterns:
- "zcash_*"
- "orchard"
- "halo2*"
- "incrementalmerkletree"
- "bridgetree"
- "equihash"
dev:
dependency-type: "development"
# Devops section
- package-ecosystem: github-actions
directory: '/'
schedule:
# tj-actions/changed-files often updates daily, which is too much for us
interval: weekly
day: wednesday
timezone: America/New_York
open-pull-requests-limit: 4
labels:
- 'C-trivial'
- 'A-devops'
- 'A-dependencies'
- 'P-Low :snowflake:'
groups:
devops:
patterns:
- "*"