Use dependabot v2 (#297)
authorShinigami <chrissi92@hotmail.de>
Fri, 26 Mar 2021 16:38:32 +0000 (17:38 +0100)
committerGitHub <noreply@github.com>
Fri, 26 Mar 2021 16:38:32 +0000 (17:38 +0100)
.dependabot/config.yml [deleted file]
.github/dependabot.yml [new file with mode: 0644]

diff --git a/.dependabot/config.yml b/.dependabot/config.yml
deleted file mode 100644 (file)
index 7425d44..0000000
+++ /dev/null
@@ -1,10 +0,0 @@
-version: 1
-update_configs:
-  - package_manager: 'javascript'
-    directory: '/'
-    update_schedule: 'live'
-    default_reviewers:
-      - 'pioardi'
-      - 'Shinigami92'
-      - 'jerome-benoit'
-    version_requirement_updates: 'increase_versions'
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644 (file)
index 0000000..7d0aabb
--- /dev/null
@@ -0,0 +1,14 @@
+# Docs: https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates
+version: 2
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    labels:
+      - 'dependencies'
+    reviewers:
+      - 'pioardi'
+      - 'Shinigami92'
+      - 'jerome-benoit'
+    versioning-strategy: increase