# see https://pyup.io/docs/configuration/ for all available options

schedule: "every week on wednesday"

# Security updates only - not just any newer version
update: insecure

search: False
requirements:
  - requirements.in
  - requirements_for_test.txt

# see https://pyup.io/docs/configuration/ for all available options

schedule: "every week on wednesday"

# Security updates only - not just any newer version
update: insecure

search: False
requirements:
  - requirements.in:
    update: insecure
  - requirements_for_test.txt:
    update: insecure

Fix PyUp insecure-only version bumps.
Fix PyUp insecure-only version bumps.

PyUp docs:

```
requirements:
  - requirements/staging.txt:
      # update all dependencies and pin them
      update: all
      pin: True
  - requirements/dev.txt:
      # don't update dependencies, use global 'pin' default
      update: False
  - requirements/prod.txt:
      # update insecure only, pin all
      update: insecure
      pin: True
```

Despite their own documentation implying settings configured at a global
level apply everywhere, it's not true.

https://github.com/pyupio/pyup/issues/238
