Skip to content

Commit f5838ac

Browse files
authored
Infra: Run dependabot daily for gradle, npm and docker
Dependencies like Spring are very prone to CVEs and we should not delay receiving and merging fixes when CVEs are found.
1 parent 47838bd commit f5838ac

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

.github/dependabot.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ updates:
44
- package-ecosystem: gradle
55
directory: "/"
66
schedule:
7-
interval: weekly
7+
interval: daily
88
time: "10:00"
99
timezone: Europe/London
1010
open-pull-requests-limit: 10
@@ -41,7 +41,7 @@ updates:
4141
- package-ecosystem: docker
4242
directory: "/api"
4343
schedule:
44-
interval: weekly
44+
interval: daily
4545
time: "10:00"
4646
timezone: Europe/London
4747
open-pull-requests-limit: 10
@@ -55,7 +55,7 @@ updates:
5555
- package-ecosystem: npm
5656
directory: "/frontend"
5757
schedule:
58-
interval: weekly
58+
interval: daily
5959
time: "10:00"
6060
timezone: Europe/London
6161
open-pull-requests-limit: 10

0 commit comments

Comments
 (0)