inspec/.github/dependabot.yml
Tim Smith bcc98feada Enable repeatable builds by bundling Gemfile.lock
This way changes to omnibus-software or omnibus don't change the builds. This is important for us, but also for cinc. It also makes sure that we're tracking bumps to the omnibus-software in the InSpec changelog so we can build release notes that reflect key dep changes like openssl. We recently added the same thing to Infra Server to better track deps there and we've done this in infra client for many years.

Signed-off-by: Tim Smith <tsmith@chef.io>
2021-10-02 16:52:40 -07:00

12 lines
No EOL
244 B
YAML

version: 2
updates:
- package-ecosystem: bundler
directory: "/"
schedule:
interval: daily
open-pull-requests-limit: 10
- package-ecosystem: bundler
directory: "/omnibus"
schedule:
interval: daily
open-pull-requests-limit: 10