75fe2ff0c3
# Fixes software supply chain safety warnings like at the bottom right of https://github.com/dmlc/xgboost/actions/runs/9048469681 * [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot) * [Configuration options for the dependabot.yml file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem)
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
# To get started with Dependabot version updates, you'll need to specify which
|
|
# package ecosystems to update and where the package manifests are located.
|
|
# Please see the documentation for all configuration options:
|
|
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages"
|
|
schedule:
|
|
interval: "monthly"
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages/xgboost4j"
|
|
schedule:
|
|
interval: "daily"
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages/xgboost4j-gpu"
|
|
schedule:
|
|
interval: "monthly"
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages/xgboost4j-example"
|
|
schedule:
|
|
interval: "monthly"
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages/xgboost4j-spark"
|
|
schedule:
|
|
interval: "daily"
|
|
- package-ecosystem: "maven"
|
|
directory: "/jvm-packages/xgboost4j-spark-gpu"
|
|
schedule:
|
|
interval: "monthly"
|
|
- package-ecosystem: "github-actions"
|
|
directory: /
|
|
schedule:
|
|
interval: "monthly"
|