# Keep GitHub Actions up to date with GitHub's Dependabot...

# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem

version: 2

updates:

- package-ecosystem: github-actions

directory: /

groups:

github-actions:

patterns:

- "*" # Group all Actions updates into a single larger pull request

schedule:

interval: weekly

- package-ecosystem: cargo

directory: /

groups:

security:

patterns:

- "*"

applies-to: security-updates

low-prio:

patterns:

- "*" # Group all cargo updates into a single larger pull request

applies-to: version-updates

update-types:

- "patch"

- "minor"

high-priority:

patterns:

- "*"

applies-to: version-updates

update-types:

- "major"

cooldown:

default-days: 30

semver-major-days: 90

semver-minor-days: 60

semver-patch-days: 30

schedule:

interval: weekly