From 112d43c044ab3268c2e70cff3d95c03c94d02dfc Mon Sep 17 00:00:00 2001 From: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Date: Fri, 30 Sep 2022 12:00:19 +0100 Subject: [PATCH 1/4] Enable dependabot updates Fixes https://github.com/matrix-org/synapse/issues/11828 --- .github/dependabot.yml | 16 ++++++++++++++++ changelog.d/13977.misc | 2 ++ 2 files changed, 18 insertions(+) create mode 100644 .github/dependabot.yml create mode 100644 changelog.d/13977.misc diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000000..faab28c0b3fb --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,16 @@ +version: 2 +updates: + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + + - package-ecosystem: "docker" + directory: "/docker" + schedule: + interval: "weekly" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" diff --git a/changelog.d/13977.misc b/changelog.d/13977.misc new file mode 100644 index 000000000000..4ba4754eccc2 --- /dev/null +++ b/changelog.d/13977.misc @@ -0,0 +1,2 @@ +Enable update notifications from Github's dependabot. + From b83514003f47daf5c236d353103a4bb4b2bf06f4 Mon Sep 17 00:00:00 2001 From: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Date: Fri, 30 Sep 2022 12:22:53 +0100 Subject: [PATCH 2/4] Update and rename 13977.misc to 13976.misc --- changelog.d/{13977.misc => 13976.misc} | 1 - 1 file changed, 1 deletion(-) rename changelog.d/{13977.misc => 13976.misc} (98%) diff --git a/changelog.d/13977.misc b/changelog.d/13976.misc similarity index 98% rename from changelog.d/13977.misc rename to changelog.d/13976.misc index 4ba4754eccc2..c235d3a4ac54 100644 --- a/changelog.d/13977.misc +++ b/changelog.d/13976.misc @@ -1,2 +1 @@ Enable update notifications from Github's dependabot. - From b5bdce46502ef3a359d665510a8168f67a564c60 Mon Sep 17 00:00:00 2001 From: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Date: Fri, 30 Sep 2022 12:23:53 +0100 Subject: [PATCH 3/4] Update .github/dependabot.yml --- .github/dependabot.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index faab28c0b3fb..2f668b0aa8d0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,7 @@ version: 2 updates: - - package-ecosystem: "pip" + - # "pip" is the correct setting for poetry, per https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + package-ecosystem package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" From 210be42d6a95a97fb524f76770394ef912166202 Mon Sep 17 00:00:00 2001 From: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Date: Fri, 30 Sep 2022 12:24:35 +0100 Subject: [PATCH 4/4] Update dependabot.yml --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2f668b0aa8d0..9c7db1fc866f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,7 +1,7 @@ version: 2 updates: - - # "pip" is the correct setting for poetry, per https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - package-ecosystem package-ecosystem: "pip" + - # "pip" is the correct setting for poetry, per https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem + package-ecosystem: "pip" directory: "/" schedule: interval: "weekly"