ci: Enable Dependabot for security updates

hashicorp · Nov 29, 2024 · 2493ae4 · 2493ae4
1 parent 3adb156
commit 2493ae4
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,6 +1,15 @@
 version: 2
 
 updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+      - security
+    # Disable regular version updates and only use Dependabot for security updates
+    open-pull-requests-limit: 0
   - package-ecosystem: github-actions
     directory: /
     schedule: