Activate Dependabot for Server Dependencies

This patch activates Dependabot to automatically submit pull requests
updating the server dependencies once per month. This makes it easier to
stay up-to-date with potential security problems and library bugs.

This will not touch any client libraries. They are outdated and should
get updates as well, but they need manual care first before we can think
about a semi-automated update process.
This commit is contained in:
Lars Kiesow 2023-01-22 13:55:10 +01:00
parent 024d052a7b
commit 1351c62598
No known key found for this signature in database
GPG Key ID: 5DAFE8D9C823CE73

7
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,7 @@
version: 2
updates:
- package-ecosystem: npm
directory: /
schedule:
interval: monthly
time: "04:00"