version: 2
updates:
  - package-ecosystem: bundler
    directory: /
    schedule:
      interval: daily
    allow:
      # Security updates
      - dependency-name: brakeman
        dependency-type: direct
      # Internal gems
      - dependency-name: "govuk*"
        dependency-type: direct
      - dependency-name: gds-api-adapters
        dependency-type: direct
      - dependency-name: govspeak
        dependency-type: direct
      - dependency-name: plek
        dependency-type: direct
      - dependency-name: rubocop-govuk
        dependency-type: direct
      # Framework gems
      - dependency-name: jasmine-rails
        dependency-type: direct
      - dependency-name: minitest-spec-rails
        dependency-type: direct
      - dependency-name: rails
        dependency-type: direct

  # Ruby needs to be upgraded manually in multiple places, so cannot
  # be upgraded by Dependabot. That effectively makes the below
  # config redundant, as ruby is the only updatable thing in the
  # Dockerfile, although this may change in the future. We hope this
  # config will save a dev from trying to upgrade ruby via Dependabot.
  - package-ecosystem: docker
    ignore:
      - dependency-name: ruby
    directory: /
    schedule:
      interval: weekly

version: 2
updates:
  - package-ecosystem: bundler
    directory: /
    schedule:
      interval: daily
    allow:
      # Security updates
      - dependency-name: brakeman
        dependency-type: direct
      # Internal gems
      - dependency-name: "govuk*"
        dependency-type: direct
      - dependency-name: gds-api-adapters
        dependency-type: direct
      - dependency-name: govspeak
        dependency-type: direct
      - dependency-name: plek
        dependency-type: direct
      - dependency-name: rubocop-govuk
        dependency-type: direct
      - dependency-name: slimmer
        dependency-type: direct
      # Framework gems
      - dependency-name: jasmine-rails
        dependency-type: direct
      - dependency-name: minitest-spec-rails
        dependency-type: direct
      - dependency-name: rails
        dependency-type: direct

  # Ruby needs to be upgraded manually in multiple places, so cannot
  # be upgraded by Dependabot. That effectively makes the below
  # config redundant, as ruby is the only updatable thing in the
  # Dockerfile, although this may change in the future. We hope this
  # config will save a dev from trying to upgrade ruby via Dependabot.
  - package-ecosystem: docker
    ignore:
      - dependency-name: ruby
    directory: /
    schedule:
      interval: weekly

Add slimmer to Dependabot config
Add slimmer to Dependabot config

This got missed in the initial config creation.
As Slimmer is an internal gem, it should be added
to the config.

https://trello.com/c/uPoriyfJ/2049-add-dependabot-configuration-to-each-repo-blitz-pair
