Update dependabot versioning strategy to lockfile-only for pip packages

Santandersecurityresearch · Oct 7, 2024 · 75c84e5 · 75c84e5
1 parent 7fe513b
commit 75c84e5
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -2,9 +2,10 @@ version: 2
 updates:
 - package-ecosystem: "pip"
   directory: "/"
+  versioning-strategy: "lockfile-only"
   schedule:
     interval: "daily"
-  target-branch: "develop"    
+  target-branch: "develop"
   reviewers:
     - "danielcuthbert"
     - "javixeneize"
@@ -14,7 +15,7 @@ updates:
   directory: "/"
   schedule:
     interval: "weekly"
-  target-branch: "develop"    
+  target-branch: "develop"
   reviewers:
     - "danielcuthbert"
     - "javixeneize"