From ef77211bb26fcfb5a65efb7e29ef7e7550b1482b Mon Sep 17 00:00:00 2001 From: Yeikel Santana Date: Mon, 22 Sep 2025 15:45:43 -0400 Subject: [PATCH] Infra: Run dependabot daily for gradle, npm and docker Dependencies like Spring are very prone to CVEs and we should not delay receiving and merging fixes when CVEs are found. --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bb0a26569..6fe27ece9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,7 @@ updates: - package-ecosystem: gradle directory: "/" schedule: - interval: weekly + interval: daily time: "10:00" timezone: Europe/London open-pull-requests-limit: 10 @@ -41,7 +41,7 @@ updates: - package-ecosystem: docker directory: "/api" schedule: - interval: weekly + interval: daily time: "10:00" timezone: Europe/London open-pull-requests-limit: 10 @@ -55,7 +55,7 @@ updates: - package-ecosystem: npm directory: "/frontend" schedule: - interval: weekly + interval: daily time: "10:00" timezone: Europe/London open-pull-requests-limit: 10