mirror of
https://github.com/kemko/nomad.git
synced 2026-01-04 09:25:46 +03:00
db5022b965
Dependabot can update actions to versions that are not in the TSCCR allowlist. The TSCCR check doesn't happen in CE, which means we don't learn we have a problem until after we've spent the effort to backport them. Remove the automation that updates actions automatically until this issue is resolved on the security team's side.
43 lines
881 B
YAML
43 lines
881 B
YAML
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: gomod
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "09:00"
|
|
labels:
|
|
- "theme/dependencies"
|
|
- package-ecosystem: gomod
|
|
directory: "/api"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "09:00"
|
|
labels:
|
|
- "theme/dependencies"
|
|
- "theme/api"
|
|
- package-ecosystem: npm
|
|
directory: "/ui"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "09:00"
|
|
labels:
|
|
- "theme/dependencies"
|
|
- "theme/ui"
|
|
- package-ecosystem: npm
|
|
directory: "/website"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "09:00"
|
|
assignees:
|
|
- "@hashicorp/web-platform"
|
|
labels:
|
|
- "theme/dependencies"
|
|
- "theme/website"
|