From 0f4eeb0668ca8f3803e5ebace2bc377aa56ca4e0 Mon Sep 17 00:00:00 2001 From: jsonBackup Date: Thu, 25 May 2023 12:35:23 +0200 Subject: [PATCH 1/2] Add dependabot.yml --- .github/dependabot.yml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..0133aa2b9 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,33 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 +updates: + - package-ecosystem: "nuget" # See documentation for possible values + directory: "/" # Location of package manifests + open-pull-requests-limit: 50 + schedule: + interval: "weekly" + # Check for nuget updates on Fridays + day: "friday" + time: "08:00" + timezone: "Europe/Berlin" + # Labels on pull requests for security and version updates + labels: + - "nuget" + - "dependencies" + - package-ecosystem: "npm" + directory: "src/Moryx.CommandCenter.Web/" + open-pull-requests-limit: 50 + schedule: + interval: "weekly" + # Check for npm updates on Fridays + day: "friday" + time: "08:05" + timezone: "Europe/Berlin" + # Labels on pull requests for security and version updates + labels: + - "npm" + - "dependencies" \ No newline at end of file From b8050bdc53f2b529ef2ccc7554a008cf9de51ceb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 25 May 2023 12:53:33 +0000 Subject: [PATCH 2/2] Bump Moq from 4.17.2 to 4.18.4 Bumps [Moq](https://github.com/moq/moq4) from 4.17.2 to 4.18.4. - [Release notes](https://github.com/moq/moq4/releases) - [Changelog](https://github.com/moq/moq4/blob/main/CHANGELOG.md) - [Commits](https://github.com/moq/moq4/compare/v4.17.2...v4.18.4) --- updated-dependencies: - dependency-name: Moq dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Directory.Build.targets | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Directory.Build.targets b/Directory.Build.targets index 1e4f23370..8223108f5 100644 --- a/Directory.Build.targets +++ b/Directory.Build.targets @@ -18,7 +18,7 @@ - +