Merge branch 'fix/dependabot' into 'main'

Final touches to setup Dependabot

See merge request bloodyhealth/drip!424

.gitlab-ci.yml

@@ -11,27 +11,28 @@ test_async:
     - npm install
     - npm test
 
-.dependabot:
+variables:
+  DEPENDABOT_IMAGE: docker.io/andrcuns/dependabot-gitlab:0.23.0
+
+.dependabot-gitlab:
   image:
-    name: docker.io/andrcuns/dependabot-gitlab:0.22.4
+    name: $DEPENDABOT_IMAGE
     entrypoint: ['']
   variables:
     GIT_STRATEGY: none
-    PACKAGE_MANAGER: $CI_JOB_NAME
     RAILS_ENV: production
     SECRET_KEY_BASE: key
+    PACKAGE_MANAGER: $CI_JOB_NAME
     SETTINGS__GITLAB_URL: $CI_SERVER_URL
     SETTINGS__STANDALONE: 'true'
     SETTINGS__LOG_COLOR: 'true'
-  before_script:
-    - cd /home/dependabot/app
   script:
-    - bundle exec rake "dependabot:update[$CI_PROJECT_NAMESPACE/$CI_PROJECT_NAME,$PACKAGE_MANAGER,/]"
+    - cd /home/dependabot/app
+    - bundle exec rake "dependabot:update[$PROJECT_PATH,$PACKAGE_MANAGER,$DIRECTORY]"
+
+npm:
+  extends: .dependabot-gitlab
   rules:
-    - if: '$CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_NAME == "dependabot"'
-
-gitsubmodule:
-  extends: .dependabot
-
-pip:
-  extends: .dependabot
+    - if: $DEPENDENCY_UPDATES_DISABLED
+      when: never
+    - if: '$CI_PIPELINE_SOURCE == "schedule" && $PACKAGE_MANAGER_SET =~ /(\bnpm|yarn\b)/'

.gitlab/dependabot.yml

@@ -5,5 +5,5 @@ updates:
   - package-ecosystem: npm
     directory: /
     schedule:
-      interval: daily
+      interval: weekly
     open-pull-requests-limit: 3