Dependabot: Set dependency-type: "indirect"
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
-updates:
+updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
@@ -16,6 +16,11 @@ updates:
directory: "/"
schedule:
interval: "daily"
+ # Set dependency-type: "indirect"
+ # https://github.com/dependabot/dependabot-core/issues/6200#issuecomment-1325144662
+ # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#allow
+ allow:
+ - dependency-type: "indirect"
- package-ecosystem: "docker"
directory: "/"
