From 9885b9552a4993c434f613459339aa7f0f81b17f Mon Sep 17 00:00:00 2001
From: Rajpal Chauhan <rajpal.chauhan@gov.bc.ca>
Date: Wed, 29 May 2024 08:49:33 -0700
Subject: [PATCH] chore: updating dependabot file to support GHA, Python and
 docker packages

Signed-off-by: Rajpal Chauhan <rajpal.chauhan@gov.bc.ca>
---
 .github/dependabot.yml | 35 +++++++++++++++++++++++++----------
 1 file changed, 25 insertions(+), 10 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 806e3d9..106b1f0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,20 +1,35 @@
+ # For details on how this file works refer to:
+ #   - https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 version: 2
 updates:
   # Maintain dependencies for GitHub Actions
+  #  - Check for updates once a week
   #  - Group all updates into a single PR
-  - package-ecosystem: github-actions
-    directory: /
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: weekly
-      day: monday
-      time: 01:00
-      timezone: Canada/Pacific
+      interval: "weekly"
     groups:
       all-actions:
         patterns: [ "*" ]
 
-  # Maintain dependencies for Python packages
-  - package-ecosystem: pip
-    directory: /server
+  # Maintain dependencies for Python Packages
+  - package-ecosystem: "pip"
+    directory: "/server"
     schedule:
-      interval: daily
\ No newline at end of file
+      interval: "weekly"
+      day: "monday"
+      time: "04:00"
+      timezone: "Canada/Pacific"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "04:00"
+      timezone: "Canada/Pacific"
+