diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d0bf4e4..df79362 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,3 +7,16 @@ updates: interval: "weekly" cooldown: # Reduce supply chain attack risk default-days: 7 + - package-ecosystem: "pre-commit" + directory: "/" + schedule: + interval: "weekly" + cooldown: # Reduce supply chain attacks risk + default-days: 7 + labels: + - "dependencies" + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 5470379..e1cf161 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,6 +1,6 @@ repos: - repo: https://github.com/pre-commit/pre-commit-hooks - rev: v5.0.0 + rev: cef0300fd0fc4d2a87a85fa2093c6b283ea36f4b # v5.0.0 hooks: - id: check-yaml - id: end-of-file-fixer @@ -8,7 +8,7 @@ repos: stages: [commit] - id: trailing-whitespace - repo: https://github.com/Lucas-C/pre-commit-hooks - rev: v1.5.5 + rev: a30f0d816e5062a67d87c8de753cfe499672b959 # v1.5.5 hooks: - id: forbid-crlf - id: remove-crlf