From 0b245308c3fe7f2c426aa169fb9a94d09ab5a7df Mon Sep 17 00:00:00 2001 From: Vitor Bandeira Date: Thu, 3 Sep 2026 19:10:37 -0300 Subject: [PATCH] Update dependabot to watch Docker images Only GitHub Actions was watched. Adds docker, and a 7-day cooldown so a bad release is pulled before it reaches a branch. Signed-off-by: Vitor Bandeira --- .github/dependabot.yml | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c7fc735e..a92a1fd5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,25 @@ version: 2 updates: - - package-ecosystem: github-actions + - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + groups: + actions: + patterns: + - "*" + + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "daily" + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + groups: + images: + patterns: + - "*"