dependabot.yml

# Reference: https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates
# NOTE: dependabot only takes care of updating non-npm deps
# npm dependencies are updated through the "yarn-upgrade" github workflow.

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    labels:
      - "auto-approve"
    open-pull-requests-limit: 5
  - package-ecosystem: "pip"
    directory: "/packages/@aws-cdk/lambda-layer-awscli"
    schedule:
      interval: "weekly"
    labels:
      - "auto-approve"
    open-pull-requests-limit: 5

  # Non-TypeScript init template dependency updates
  - package-ecosystem: "pip"
    directory: "/packages/aws-cdk/lib/init-templates"
    schedule:
      interval: "weekly"
    labels:
      - "auto-approve"
    open-pull-requests-limit: 5
  - package-ecosystem: "maven"
    directory: "/packages/aws-cdk/lib/init-templates"
    schedule:
      interval: "weekly"
    labels:
      - "auto-approve"
    open-pull-requests-limit: 5
  - package-ecosystem: "nuget"
    directory: "/packages/aws-cdk/lib/init-templates"
    schedule:
      interval: "weekly"
    labels:
      - "auto-approve"
    open-pull-requests-limit: 5