From 23e56a3e92d87efb31161bec4733f4911ec9cc50 Mon Sep 17 00:00:00 2001
From: Alaric Whitney <Alaric.Whitney@target.com>
Date: Mon, 10 Apr 2023 11:32:37 -0500
Subject: [PATCH] feat: update dependabot for full scanning

---
 .github/dependabot.yml | 162 ++++++++++++++++++++++++++++++++++++++---
 1 file changed, 153 insertions(+), 9 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9ea70d824f..3531bcd1b7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,13 +1,157 @@
+# configuration options available at https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+# This configuration implements every package-ecosystem entry with the following logic:
+# - run Sunday's at midnight at a timeframe that allows TII team members to benefit from dependabot runs
+# - only manage direct dependencies, as opposed to transient dependencies which are harder to maintain at scale
+
 version: 2
 updates:
-  - package-ecosystem: npm
+  - package-ecosystem: 'bundler'
     directory: '/'
     schedule:
-      interval: daily
-      time: '09:00'
-      timezone: 'America/Chicago'
-    open-pull-requests-limit: 3
-    ignore:
-      # ignore all patch updates
-      - dependency-name: '*'
-        update-types: ['version-update:semver-patch']
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'cargo'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'composer'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'docker'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'mix'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'elm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'gitsubmodule'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'gomod'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'gradle'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'maven'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'nuget'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'pip'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'
+
+  - package-ecosystem: 'terraform'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'sunday'
+      time: '00:00'
+      timezone: 'Asia/Kolkata'
+    allow:
+      - dependency-type: 'direct'