Merge pull request #8 from ethiotelecom-et/Create-action-patch-1

Update dependabot.yml

.github/dependabot.yml

@@ -1,45 +1,34 @@
-# To get started with Dependabot version updates, you'll need to specify which
+# Use `allow` to specify which dependencies to maintain
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 
 version: 2
 updates:
-  - package-ecosystem: npm
+  - package-ecosystem: "npm"
-    directory: '/'
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
-      day: tuesday
+    allow:
-    open-pull-requests-limit: 20 # default is 5
+      # Allow updates for Lodash
-    ignore:
+      - dependency-name: "lodash"
-      # Because this is so dependent on the remote server we use
+      # Allow updates for React and any packages starting "react"
-      - dependency-name: '@elastic/elasticsearch'
+      - dependency-name: "react*"
-      # Because whatever we have needs to match what @primer/react also uses
-      - dependency-name: 'styled-components'
-      - dependency-name: '*'
-        update-types:
-          ['version-update:semver-patch', 'version-update:semver-minor']
 
-  - package-ecosystem: 'github-actions'
+  - package-ecosystem: "composer"
-    directory: '/'
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
-      day: wednesday
+    allow:
-    ignore:
+      # Allow both direct and indirect updates for all packages
-      - dependency-name: '*'
+      - dependency-type: "all"
-        update-types:
-          ['version-update:semver-patch', 'version-update:semver-minor']
 
-  - package-ecosystem: 'docker'
+  - package-ecosystem: "pip"
-    directory: '/'
+    directory: "/"
     schedule:
-      interval: weekly
+      interval: "weekly"
-      day: thursday
+    allow:
-    ignore:
+      # Allow only direct updates for
-      - dependency-name: 'node'
+      # Django and any packages starting "django"
-  
+      - dependency-name: "django*"
-  - package-ecosystem: 'pip'
+        dependency-type: "direct"
-    directory: "/__tests__/data/requirements-linux.txt"
+      # Allow only production updates for Sphinx
-    schedule:
+      - dependency-name: "sphinx"
-      interval: weekly
+        dependency-type: "production"
-       day: Monday