bhcclocalgov-dependabot.yml

gistfile1.txt

version: 2
updates:
  - package-ecosystem: "composer"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "07:00"

    allow:
      # Allow both direct and indirect updates for all packages
      - dependency-type: "all"
    versioning-strategy: lockfile-only

    groups:
      localgovdrupal-updates:
        patterns:
          - "localgovdrupal/*"
        update-types:
          - "minor"
          - "patch"
      vendor-dependancy-updates:
        patterns:
          - "*/*"
        exclude-patterns:
          - "drupal/*"
          - "localgovdrupal/*"
        update-types:
          - "minor"
          - "patch"
      contrib-module-updates:
        patterns:
          - "drupal/*"
        exclude-patterns:
          - "drupal/core*"
        update-types:
          - "minor"
          - "patch"
        dependency-type: "production"
      contrib-dev-module-updates:
        patterns:
          - "drupal/*"
        exclude-patterns:
          - "drupal/core*"
        update-types:
          - "minor"
          - "patch"
        dependency-type: "development"
      drupal-core-patches:
        patterns:
          - "drupal/core*"
        update-types:
          - "patch"
    ignore:
      - dependency-name: "drupal/core*"
        update-types: ["version-update:semver-major", "version-update:semver-minor"]
      - dependency-name: "drupal/*"
        update-types: ["version-update:semver-major"]

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "07:00"