mirror of
https://github.com/theupdateframework/python-tuf
synced 2026-05-24 10:08:28 +00:00
38 lines
878 B
YAML
38 lines
878 B
YAML
version: 2
|
|
updates:
|
|
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
build-and-release-dependencies:
|
|
# Python dependencies known to be critical to our build/release security
|
|
patterns:
|
|
- "build"
|
|
- "hatchling"
|
|
test-and-lint-dependencies:
|
|
# Python dependencies that are only pinned to ensure test reproducibility
|
|
patterns:
|
|
- "bandit"
|
|
- "coverage"
|
|
- "mypy"
|
|
- "ruff"
|
|
- "tox"
|
|
dependencies:
|
|
# Python (developer) runtime dependencies. Also any new dependencies not
|
|
# caught by earlier groups
|
|
patterns:
|
|
- "*"
|
|
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
action-dependencies:
|
|
patterns:
|
|
- "*"
|