Скачать или смотреть Configure version updates in Dependabot

You can configure your repository so that Dependabot automatically updates the packages you use. Enable Dependabot version updates by committing a dependabot.yml configuration file to your repository.

After you've enabled version updates, you can customize how Dependabot maintains your dependencies by adding further options to the dependabot.yml file. For example, you could:

1. Specify which day of the week to open pull requests for version updates: schedule.day.
2. Set reviewers, assignees, and labels for each package manager: reviewers, assignees, and labels.
3. Define a versioning strategy for changes to each manifest file: versioning-strategy.
4. Change the maximum number of open pull requests for version updates from the default of 5: open-pull-requests-limit.
5. Open pull requests for version updates to target a specific branch, instead of the default branch: target-branch.

For all configuration options, check out:
https://docs.github.com/en/code-secur...

Presented by: Andrea Griffiths