SDCSRM-542 Dependabot Security Only PRs (#345)

ONSdigital · Jul 2, 2024 · afc7269 · afc7269
1 parent 1be32ab
commit afc7269
Showing 1 changed file with 22 additions and 9 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -2,21 +2,34 @@ version: 2
 updates:
   - package-ecosystem: "maven"
     directory: "/"
+    target-branch: "main"
+    groups:
+      maven-security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
     schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: [ "version-update:semver-patch", "version-update:semver-minor" ]
+      interval: "daily"
     labels:
       - "patch"
       - "dependencies"
+    ignore:
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-patch", "version-update:semver-minor", "version-update:semver-major" ]
+
   - package-ecosystem: "npm"
     directory: "/ui"
+    target-branch: "main"
+    groups:
+      npm-security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
     schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: [ "version-update:semver-patch", "version-update:semver-minor" ]
+      interval: "daily"
     labels:
       - "patch"
-      - "dependencies"
+      - "dependencies"
+    ignore:
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-patch", "version-update:semver-minor", "version-update:semver-major" ]