apm-wo-analysis/.github/dependabot.yml
Adam Moussa 6c392a7362
Some checks are pending
Deploy / deploy (push) Waiting to run
fix(deps): bump aws-cdk-lib pin to 2.257.0 (#20)
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
2026-06-05 13:18:47 -04:00

41 lines
809 B
YAML

version: 2
updates:
- package-ecosystem: "pip"
directory: "/cdk"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"
- package-ecosystem: "pip"
directory: "/lambdas/classifier"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"
- package-ecosystem: "pip"
directory: "/lambdas/slack_post"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"