g1t/services/security/fixtures/dependabot/hashicorp_terraform.yml
| 1 | # hashicorp/terraform's .github/dependabot.yml, as published. |
| 2 | version: 2 |
| 3 | updates: |
| 4 | - package-ecosystem: gomod |
| 5 | directory: / |
| 6 | schedule: |
| 7 | interval: daily |
| 8 | labels: |
| 9 | - dependencies |
| 10 | - go |
| 11 | - security |
| 12 | # Disable regular version updates and only use Dependabot for security updates |
| 13 | open-pull-requests-limit: 0 |
| 14 | - package-ecosystem: github-actions |
| 15 | directory: / |
| 16 | schedule: |
| 17 | interval: monthly |
| 18 | labels: |
| 19 | - dependencies |
| 20 | - build |
| 21 | - security |
| 22 | groups: |
| 23 | github-actions-breaking: |
| 24 | update-types: |
| 25 | - major |
| 26 | github-actions-backward-compatible: |
| 27 | update-types: |
| 28 | - minor |
| 29 | - patch |