dependabot.yml

---

# Any ignore directives should be uncommented in downstream projects to disable
# Dependabot updates for the given dependency. Downstream projects will get
# these updates when the pull request(s) in the appropriate skeleton are merged
# and Lineage processes these changes.

updates:
  - directory: /
    ignore:
      # Managed by cisagov/skeleton-generic
      - dependency-name: actions/cache
      - dependency-name: actions/checkout
      - dependency-name: actions/setup-go
      - dependency-name: actions/setup-python
      - dependency-name: crazy-max/ghaction-dump-context
      - dependency-name: crazy-max/ghaction-github-labeler
      - dependency-name: crazy-max/ghaction-github-status
      - dependency-name: hashicorp/setup-terraform
      - dependency-name: mxschmitt/action-tmate
      - dependency-name: step-security/harden-runner
    package-ecosystem: github-actions
    schedule:
      interval: weekly

  - directory: /
    # ignore:
    #   # Managed by cisagov/skeleton-ansible-role
    #   - dependency-name: ansible
    #   - dependency-name: ansible-lint
    package-ecosystem: pip
    schedule:
      interval: weekly

  - directory: /
    package-ecosystem: terraform
    schedule:
      interval: weekly
version: 2