g1t/services/security/fixtures/dependabot/hashicorp_vault.yml
| 1 | # hashicorp/vault's .github/dependabot.yml, as published. |
| 2 | version: 2 |
| 3 | |
| 4 | # We manage dependabot update/alerts via vault-enterprise so there's no need to |
| 5 | # to open these on the community edition repository. |
| 6 | updates: |
| 7 | - package-ecosystem: "github-actions" |
| 8 | directory: "/" |
| 9 | schedule: |
| 10 | interval: "yearly" |
| 11 | open-pull-requests-limit: 0 |
| 12 | - package-ecosystem: "gomod" |
| 13 | directory: "/" |
| 14 | schedule: |
| 15 | interval: "yearly" |
| 16 | open-pull-requests-limit: 0 |
| 17 | - package-ecosystem: "npm" |
| 18 | directory: "/" |
| 19 | schedule: |
| 20 | interval: "yearly" |
| 21 | open-pull-requests-limit: 0 |