Maxim ShulgaandClaude Opus 5
bef866fb6a
Add a weekly Dependabot configuration for pip, the Dockerfile base image, and the GitHub Actions used by the publish workflow. The Seafile AppImage is fetched by URL with a pinned checksum, which Dependabot cannot resolve, so it stays a manual bump. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
36 lines
809 B
YAML
36 lines
809 B
YAML
version: 2
|
|
|
|
updates:
|
|
# Python runtime dependencies pinned in requirements.txt.
|
|
- package-ecosystem: pip
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- dependencies
|
|
commit-message:
|
|
prefix: pip
|
|
|
|
# Base image in the Dockerfile. The Seafile AppImage is fetched by URL and
|
|
# checksum, so Dependabot cannot track it; bump SEAFILE_CLI_VERSION and
|
|
# SEAFILE_CLI_SHA256 by hand.
|
|
- package-ecosystem: docker
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
labels:
|
|
- dependencies
|
|
commit-message:
|
|
prefix: docker
|
|
|
|
# Actions used by .github/workflows.
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
labels:
|
|
- dependencies
|
|
commit-message:
|
|
prefix: ci
|