Update dependabot to watch Docker images

Only GitHub Actions was watched. Adds docker, and a 7-day cooldown so a bad release is pulled before it reaches a branch. Signed-off-by: Vitor Bandeira <[email protected]>
2026-09-05 09:02:12 +02:00 · 2026-09-04 02:22:22 -03:00
parent c821ad1ad0
commit 0b245308c3
1 changed files with 20 additions and 1 deletions
@@ -1,6 +1,25 @@
 version: 2
 updates:
-  - package-ecosystem: github-actions
+  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
+    open-pull-requests-limit: 5
+    cooldown:
+      default-days: 7
+    groups:
+      actions:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 5
+    cooldown:
+      default-days: 7
+    groups:
+      images:
+        patterns:
+          - "*"