version: 2
updates:
  - package-ecosystem: bundler
    directory: /
    schedule:
      interval: daily
    allow:
      # Internal gems
      - dependency-name: "govuk*"
        dependency-type: direct
      - dependency-name: gds-api-adapters
        dependency-type: direct
      - dependency-name: gds-sso
        dependency-type: direct
      - dependency-name: govspeak
        dependency-type: direct
      - dependency-name: plek
        dependency-type: direct
      - dependency-name: rubocop-govuk
        dependency-type: direct
      # Framework gems
      - dependency-name: factory_bot_rails
        dependency-type: direct
      - dependency-name: rack
        dependency-type: direct
      - dependency-name: rails
        dependency-type: direct
      - dependency-name: sassc-rails
        dependency-type: direct
      # Gems with framework dependencies
      - dependency-name: inherited_resources
        dependency-type: direct
      - dependency-name: mongoid
        dependency-type: direct

  - package-ecosystem: npm
    directory: /
    schedule:
      interval: daily
    allow:
      # Internal packages
      - dependency-name: stylelint-config-gds
        dependency-type: direct
      # Framework packages
      - dependency-name: jasmine-browser-runner
        dependency-type: direct
      - dependency-name: jasmine-core
        dependency-type: direct
      - dependency-name: standardx
        dependency-type: direct
      - dependency-name: stylelint
        dependency-type: direct

  # Ruby needs to be upgraded manually in multiple places, so cannot
  # be upgraded by Dependabot. That effectively makes the below
  # config redundant, as ruby is the only updatable thing in the
  # Dockerfile, although this may change in the future. We hope this
  # config will save a dev from trying to upgrade ruby via Dependabot.
  - package-ecosystem: docker
    ignore:
      - dependency-name: ruby
    directory: /
    schedule:
      interval: weekly

version: 2
updates:
  - package-ecosystem: bundler
    directory: /
    schedule:
      interval: daily

  - package-ecosystem: npm
    directory: /
    schedule:
      interval: daily

  # Ruby needs to be upgraded manually in multiple places, so cannot
  # be upgraded by Dependabot. That effectively makes the below
  # config redundant, as ruby is the only updatable thing in the
  # Dockerfile, although this may change in the future. We hope this
  # config will save a dev from trying to upgrade ruby via Dependabot.
  - package-ecosystem: docker
    ignore:
      - dependency-name: ruby
    directory: /
    schedule:
      interval: weekly

Remove allow list from Dependabot config
Remove allow list from Dependabot config
