mirror of
https://github.com/trailofbits/algo.git
synced 2026-09-11 04:07:48 +02:00
0d314ea631
- Add 7-day cooldown to protect against supply chain attacks - Group updates by ecosystem to reduce PR noise - Change schedule from daily to weekly - Add Docker ecosystem for base image updates 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
37 lines
830 B
YAML
37 lines
830 B
YAML
---
|
|
version: 2
|
|
updates:
|
|
# Maintain dependencies for GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
groups:
|
|
github-actions:
|
|
patterns:
|
|
- "*"
|
|
|
|
# Maintain dependencies for Python using uv
|
|
# Using "uv" ecosystem ensures both pyproject.toml AND uv.lock are updated together
|
|
# This prevents Docker build failures from lockfile mismatches
|
|
- package-ecosystem: "uv"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
groups:
|
|
python:
|
|
patterns:
|
|
- "*"
|
|
|
|
# Maintain Docker base image (python:3.12-alpine)
|
|
- package-ecosystem: "docker"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|