cookiecutter-django/{{cookiecutter.project_slug}}/.github/dependabot.yml

# Config for Dependabot updates. See Documentation here:
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

version: 2
updates:
  # Update GitHub actions in workflows
  - package-ecosystem: 'github-actions'
    directory: '/'
    # Every weekday
    schedule:
      interval: 'daily'

{%- if cookiecutter.use_docker == 'y' %}

  # Enable version updates for Docker
  # We need to specify each Dockerfile in a separate entry because Dependabot doesn't
  # support wildcards or recursively checking subdirectories. Check this issue for updates:
  # https://github.com/dependabot/dependabot-core/issues/2178
  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/local/django` directory
    directory: 'compose/local/django/'
    # Every weekday
    schedule:
      interval: 'daily'
    # Ignore minor version updates (3.10 -> 3.11) but update patch versions
    ignore:
      - dependency-name: '*'
        update-types:
          - 'version-update:semver-major'
          - 'version-update:semver-minor'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/local/docs` directory
    directory: 'compose/local/docs/'
    # Every weekday
    schedule:
      interval: 'daily'
    # Ignore minor version updates (3.10 -> 3.11) but update patch versions
    ignore:
      - dependency-name: '*'
        update-types:
          - 'version-update:semver-major'
          - 'version-update:semver-minor'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/local/node` directory
    directory: 'compose/local/node/'
    # Every weekday
    schedule:
      interval: 'daily'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/production/aws` directory
    directory: 'compose/production/aws/'
    # Every weekday
    schedule:
      interval: 'daily'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/production/django` directory
    directory: 'compose/production/django/'
    # Every weekday
    schedule:
      interval: 'daily'
    # Ignore minor version updates (3.10 -> 3.11) but update patch versions
    ignore:
      - dependency-name: '*'
        update-types:
          - 'version-update:semver-major'
          - 'version-update:semver-minor'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/production/postgres` directory
    directory: 'compose/production/postgres/'
    # Every weekday
    schedule:
      interval: 'daily'

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/production/traefik` directory
    directory: 'compose/production/traefik/'
    # Every weekday
    schedule:
      interval: 'daily'

{%- if cookiecutter.cloud_provider == 'None' %}

  - package-ecosystem: 'docker'
    # Look for a `Dockerfile` in the `compose/production/nginx` directory
    directory: 'compose/production/nginx/'
    # Every weekday
    schedule:
      interval: 'daily'
{%- endif %}

{%- endif %}

  # Enable version updates for Python/Pip - Production
  - package-ecosystem: 'pip'
    # Look for a `requirements.txt` in the `root` directory
    # also 'setup.cfg', '.python-version' and 'requirements/*.txt'
    directory: '/'
    # Every weekday
    schedule:
      interval: 'daily'

{%- if cookiecutter.frontend_pipeline == 'Gulp' %}

  # Enable version updates for javascript/npm
  - package-ecosystem: 'npm'
    # Look for a `packages.json` in the `root` directory
    directory: '/'
    # Every weekday
    schedule:
      interval: 'daily'

{%- endif %}