dependabot.yml

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates

version: 2
updates:
  - package-ecosystem: "gradle" # See documentation for possible values
    directory: "/" # Location of package manifests
    schedule:
      interval: "daily"
      time: "08:00"
      timezone: "Asia/Kuala_Lumpur" # Use Kuala Lumpur Standard Time (UTC +09:00)
    labels:
      - "chore"

    # If include target branch, Dependabot will raise version updates as pull requests into this branch.
    # And will not be able to raise for security updates
    target-branch: "development"

    # If you only require security updates and want to exclude version updates,
    # you can set open-pull-requests-limit to 0 in order to prevent version updates
    open-pull-requests-limit: 0

  - package-ecosystem: "gradle"
    directory: "/app"
    schedule:
      interval: "daily"
      time: "08:00"
      timezone: "Asia/Kuala_Lumpur"
    labels:
      - "chore"
    target-branch: "development"
    open-pull-requests-limit: 0

  - package-ecosystem: "github-actions"
    # Workflow files stored in the default location of `.github/workflows`
    # You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`
    directory: "/"
    schedule:
      interval: "weekly"
      day: "monday"
      time: "08:00"
      timezone: "Asia/Kuala_Lumpur" # Use Kuala Lumpur Standard Time (UTC +09:00)
    open-pull-requests-limit: 5