Merge pull request #30 from markusressel/dependabot/add-v2-config-file

Upgrade to GitHub-native Dependabot
markusressel · May 12, 2021 · 63827ad · 63827ad
2 parents d431d56 + 2f904f1
commit 63827ad
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,31 @@
+version: 2
+registries:
+  python-index-pypi-python-org-simple:
+    type: python-index
+    url: https://pypi.python.org/simple/
+    username: "${{secrets.PYTHON_INDEX_PYPI_PYTHON_ORG_SIMPLE_USERNAME}}"
+    password: "${{secrets.PYTHON_INDEX_PYPI_PYTHON_ORG_SIMPLE_PASSWORD}}"
+
+updates:
+- package-ecosystem: pip
+  directory: "/"
+  schedule:
+    interval: daily
+    time: "16:00"
+    timezone: Europe/Berlin
+  open-pull-requests-limit: 10
+  ignore:
+  - dependency-name: urllib3
+    versions:
+    - 1.26.4
+  - dependency-name: prometheus-client
+    versions:
+    - 0.10.0
+  - dependency-name: python-telegram-bot
+    versions:
+    - "13.2"
+  - dependency-name: emoji
+    versions:
+    - 1.2.0
+  registries:
+  - python-index-pypi-python-org-simple