Merge pull request #2246 from vrk-kpa/AV-2226_update_dependabot_confi…

…guration

AV-2226: Update dependabot configuration to update ckan requirements,…

.github/dependabot.yml

@@ -7,16 +7,11 @@ registries:
 
 updates:
 - package-ecosystem: pip
-  directory: "/"
+  directory: "/ckan/"
   schedule:
     interval: daily
     time: "03:00"
   open-pull-requests-limit: 10
-  ignore:
-  - dependency-name: flake8
-    versions:
-    - 3.8.4
-    - 3.9.0
 - package-ecosystem: "docker"
   directory: "/ckan/"
   schedule:
@@ -40,6 +35,18 @@ updates:
     interval: daily
     time: "03:00"
   open-pull-requests-limit: 10
+- package-ecosystem: "docker"
+  directory: "/docker/postgres/"
+  schedule:
+    interval: daily
+    time: "03:00"
+  open-pull-requests-limit: 10
+- package-ecosystem: "docker"
+  directory: "/docker/datapusher-plus/"
+  schedule:
+    interval: daily
+    time: "03:00"
+  open-pull-requests-limit: 10
 - package-ecosystem: npm
   directory: "/"
   schedule:
@@ -75,3 +82,17 @@ updates:
     interval: daily
     time: "03:00"
   open-pull-requests-limit: 10
+
+- package-ecosystem: npm
+  directory: "/cdk/"
+  schedule:
+    interval: daily
+    time: "03:00"
+  open-pull-requests-limit: 10
+
+
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    # Check for updates to GitHub Actions every week
+    interval: "weekly"

.github/workflows/dependabot-validate.yml

@@ -0,0 +1,19 @@
+name: dependabot validate
+
+on:
+  pull_request:
+    paths:
+      - '.github/dependabot.yml'
+      - '.github/workflows/dependabot-validate.yml'
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: marocchino/validate-dependabot@v3
+        id: validate
+      - uses: marocchino/sticky-pull-request-comment@v2
+        if: always()
+        with:
+          header: validate-dependabot
+          message: ${{ steps.validate.outputs.markdown }}