aspnetcore/.github/dependabot.yml

version: 2
updates:
  # Keep submodules up to date in 'main'.
  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      # Weekly interval opens PRs on Monday.
      interval: "weekly"
    allow:
      - dependency-type: "all"
    commit-message:
      prefix: "[main] "
      include: scope
    labels:
      - area-infrastructure
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      # Weekly interval opens PRs on Monday.
      interval: "weekly"
    commit-message:
      prefix: "[main] "
      include: scope
    labels:
      - area-infrastructure

  # Keep submodules up to date in 'release/*' branches. (Unfortunately Dependabot security PRs can't target these.)
  # Monthly interval opens PRs on the first of each month.
  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      interval: "monthly"
    allow:
      - dependency-type: "all"
    commit-message:
      prefix: "[release/2.1] "
      include: scope
    labels:
      - area-infrastructure
    target-branch: "release/2.1"
  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      interval: "monthly"
    allow:
      - dependency-type: "all"
    commit-message:
      prefix: "[release/3.1] "
      include: scope
    labels:
      - area-infrastructure
    target-branch: "release/3.1"
  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      interval: "monthly"
    allow:
      - dependency-type: "all"
    commit-message:
      prefix: "[release/6.0] "
      include: scope
    labels:
      - area-infrastructure
    target-branch: "release/6.0"
  - package-ecosystem: "gitsubmodule"
    directory: "/"
    schedule:
      interval: "monthly"
    allow:
      - dependency-type: "all"
    commit-message:
      prefix: "[release/7.0] "
      include: scope
    labels:
      - area-infrastructure
    target-branch: "release/7.0"