mirror of
https://github.com/blakeblackshear/frigate.git
synced 2026-10-18 07:29:45 +00:00
2cb03f442c
* group dependabot updates and hold known-bad versions Dependabot opened a separate PR for every bump, refilled the list with security PRs right after each merge, and kept proposing versions known to break Frigate. - Group minor and patch updates and security updates into one PR per ecosystem, with separate groups for packages that only resolve together - Move every version hold into ignore rules, each with its reason - Switch to weekly updates with a 3-day cooldown - Turn off version updates for docker/tensorrt, since no pull request check builds those images - Drop target-branch, which kept these options from applying to security updates, and the docker entry, which never opened a PR - Scan the setup composite action, and bump change-string-case, setup-qemu, setup-buildx and login-action * group github actions security updates