feat(ci): add dependabot to keep GH Actions up to date

Limit bot to update only monthly to avoid spam and save resources.
Also group to one PR to limit PR spam.
This commit is contained in:
Rotzbua 2024-10-28 20:28:28 +01:00
parent 5cf7ef864b
commit dba131f638
No known key found for this signature in database
GPG Key ID: C69022D529C17845

12
.github/dependabot.yaml vendored Normal file
View File

@ -0,0 +1,12 @@
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
groups:
github-actions:
patterns:
- "*"