.github/dependabot.yml
# Dependabot update strategy
version: 2
updates:
- package-ecosystem: bundler
directory: "/"
schedule:
interval: weekly
allow:
# Automatically keep all runtime dependencies updated
- dependency-name: "*"
dependency-type: "production"
versioning-strategy: lockfile-only