ci: Enable Dependabot for security updates

xiehan · web-flow · commit 2493ae4bdb8f · 2024-11-29T13:34:55.000+01:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,6 +1,15 @@
 version: 2
 
 updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+      - security
+    # Disable regular version updates and only use Dependabot for security updates
+    open-pull-requests-limit: 0
   - package-ecosystem: github-actions
     directory: /
     schedule:
