Merge pull request #2246 from vrk-kpa/AV-2226_update_dependabot_confi…

…guration

AV-2226: Update dependabot configuration to update ckan requirements,…

.github/dependabot.yml

@@ -7,16 +7,11 @@ registries:
 
 updates:
 - package-ecosystem: pip
- directory: "/"
+ directory: "/ckan/"
  schedule:
  interval: daily
  time: "03:00"
  open-pull-requests-limit: 10
- ignore:
- - dependency-name: flake8
- versions:
- - 3.8.4
- - 3.9.0
 - package-ecosystem: "docker"
  directory: "/ckan/"
  schedule:
@@ -40,6 +35,18 @@ updates:
  interval: daily
  time: "03:00"
  open-pull-requests-limit: 10
+- package-ecosystem: "docker"
+ directory: "/docker/postgres/"
+ schedule:
+ interval: daily
+ time: "03:00"
+ open-pull-requests-limit: 10
+- package-ecosystem: "docker"
+ directory: "/docker/datapusher-plus/"
+ schedule:
+ interval: daily
+ time: "03:00"
+ open-pull-requests-limit: 10
 - package-ecosystem: npm
  directory: "/"
  schedule:
@@ -75,3 +82,17 @@ updates:
  interval: daily
  time: "03:00"
  open-pull-requests-limit: 10
+
+- package-ecosystem: npm
+ directory: "/cdk/"
+ schedule:
+ interval: daily
+ time: "03:00"
+ open-pull-requests-limit: 10
+
+
+- package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ # Check for updates to GitHub Actions every week
+ interval: "weekly"

.github/workflows/dependabot-validate.yml

@@ -0,0 +1,19 @@
+name: dependabot validate
+
+on:
+ pull_request:
+ paths:
+ - '.github/dependabot.yml'
+ - '.github/workflows/dependabot-validate.yml'
+jobs:
+ validate:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - uses: marocchino/validate-dependabot@v3
+ id: validate
+ - uses: marocchino/sticky-pull-request-comment@v2
+ if: always()
+ with:
+ header: validate-dependabot
+ message: ${{ steps.validate.outputs.markdown }}