mirror of
https://github.com/sshnet/SSH.NET.git
synced 2026-09-10 09:15:47 +00:00
Rob Hague
04a6dc04c2
* Harden actions - Pin remaining actions - Specify top-level/default `permissions: contents: read` in build.yml - Set `persist-credentials: false` on checkout - Add an environment for nuget publish job and use `release` event trigger - Add dependabot cooldown * Update .github/workflows/build.yml Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
# To get started with Dependabot version updates, you'll need to specify which
|
|
# package ecosystems to update and where the package manifests are located.
|
|
# Please see the documentation for all configuration options:
|
|
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "docker"
|
|
directory: "/test/Renci.SshNet.IntegrationTests/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: "nuget"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
ignore: # See justifications in Directory.Packages.props
|
|
- dependency-name: "System.Formats.Asn1"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
- dependency-name: "Microsoft.Extensions.Logging.Abstractions"
|
|
update-types: ["version-update:semver-major"]
|
|
groups:
|
|
dependencies:
|
|
patterns:
|
|
- "*"
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "monthly"
|
|
cooldown:
|
|
default-days: 7
|