# Reference: https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates # NOTE: dependabot only takes care of updating non-npm deps # npm dependencies are updated through the "yarn-upgrade" github workflow. version: 2 updates: - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 - package-ecosystem: "pip" directory: "/packages/@aws-cdk/lambda-layer-awscli" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 # run same dependabot upgrades on v1-main - package-ecosystem: "github-actions" directory: "/" target-branch: "v1-main" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 - package-ecosystem: "pip" directory: "/packages/@aws-cdk/lambda-layer-awscli" target-branch: "v1-main" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 # Non-TypeScript init template dependency updates - package-ecosystem: "pip" directory: "/packages/aws-cdk/lib/init-templates" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 - package-ecosystem: "maven" directory: "/packages/aws-cdk/lib/init-templates" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5 - package-ecosystem: "nuget" directory: "/packages/aws-cdk/lib/init-templates" schedule: interval: "weekly" labels: - "auto-approve" open-pull-requests-limit: 5