diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8b2f232..eac3468 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,3 +21,16 @@ updates: - github/codeql-action* cooldown: default-days: 7 + - package-ecosystem: gitsubmodule + directory: / + schedule: + interval: weekly + day: monday + time: '14:00' + cooldown: + default-days: 7 + ignore: + # libmaxminddb is pinned to release tags and compiled into our wheels. + # Dependabot moves submodules to the latest commit on the tracked branch + # when no newer tag exists, which would take us off release tags. + - dependency-name: extension/libmaxminddb