mirror of
https://github.com/Zproger/Aurum.git
synced 2026-10-13 02:56:39 +07:00
2d4f405167
Еженедельные PR на уязвимые/устаревшие зависимости во frontend, backend и в самих CI-экшенах, без ручного отслеживания.
22 lines
564 B
YAML
22 lines
564 B
YAML
version: 2
|
|
updates:
|
|
# Frontend npm dependencies.
|
|
- package-ecosystem: "npm"
|
|
directory: "/frontend"
|
|
schedule:
|
|
interval: "weekly"
|
|
|
|
# Backend pip dependencies.
|
|
- package-ecosystem: "pip"
|
|
directory: "/backend"
|
|
schedule:
|
|
interval: "weekly"
|
|
|
|
# The GitHub Actions themselves (actions/checkout, setup-python, ...) used
|
|
# in .github/workflows/ci.yml — these go stale too, and an outdated action
|
|
# can be its own supply-chain risk.
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|