Files
fizzy/.github/dependabot.yml
T
Mike Dalessio 6a244b17e6 Use new FIZZY_GH_TOKEN with limited access
because this is a public repo and so doesn't have access to the
private org secret GH_TOKEN anymore.
2025-12-12 13:04:26 -05:00

33 lines
698 B
YAML

version: 2
registries:
github-basecamp:
type: git
url: https://github.com
username: x-access-token
password: ${{secrets.FIZZY_GH_TOKEN}}
updates:
- package-ecosystem: bundler
registries:
- github-basecamp
directory: "/"
insecure-external-code-execution: allow
open-pull-requests-limit: 10
vendor: false
groups:
development-dependencies:
dependency-type: "development"
schedule:
interval: weekly
cooldown:
default-days: 7
semver-major-days: 14
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 10
cooldown:
default-days: 7