Shift3 / standards-and-practices

Standards and Practices for Bitwise Industries
https://shift3.github.io/standards-and-practices/
63 stars 41 forks source link

fix(dependabot): Update dependencies automatically monthly #378

Closed michaelachrisco closed 1 year ago

michaelachrisco commented 1 year ago

Changes

  1. Make dependabot only look at updates once a month and only on the main branch.

Purpose

Most of the gems we use do not need to be updated more than once a month. We were getting bombarded with dependabot updates and we only use one library for checking urls. There is not a huge attack vector on our ci/cd jobs.

Approach

Make dependabot check and auto update every month.

Closes #317