From 30f8a251d54e1399bbf8b4cae2d3ce7d32f5a874 Mon Sep 17 00:00:00 2001 From: Armin Schrenk Date: Tue, 12 Dec 2023 15:35:22 +0100 Subject: [PATCH] update dependabot file --- .github/dependabot.yml | 27 ++++++++++++++++++++++----- 1 file changed, 22 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 505ccc1..0204850 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,14 +3,31 @@ updates: - package-ecosystem: "maven" directory: "/" schedule: - interval: "weekly" - day: "monday" - time: "06:00" - timezone: "UTC" + interval: "monthly" groups: - maven-dependencies: + java-test-dependencies: + patterns: + - "org.junit.jupiter:*" + - "org.mockito:*" + - "org.hamcrest:*" + maven-build-plugins: + patterns: + - "org.apache.maven.plugins:*" + - "org.jacoco:jacoco-maven-plugin" + - "org.owasp:dependency-check-maven" + - "org.sonatype.plugins:nexus-staging-maven-plugin" + java-production-dependencies: patterns: - "*" + exclude-patterns: + - "org.apache.maven.plugins:*" + - "org.jacoco:jacoco-maven-plugin" + - "org.owasp:dependency-check-maven" + - "org.sonatype.plugins:nexus-staging-maven-plugin" + - "org.junit.jupiter:*" + - "org.mockito:*" + - "org.hamcrest:*" + - package-ecosystem: "github-actions" directory: "/" # even for `.github/workflows`