commit dbec8da7ea5e7b9a6c982a527e17cf95ae6d61dd
author Xavier Léauté <xvrl@apache.org> Mon Jun 07 13:56:32 2021 -0700
committer GitHub <noreply@github.com> Mon Jun 07 13:56:32 2021 -0700
tree 7b9b0f3e260554fcf0ca3c28d9f126be9a08dd13
parent 7ffe402b87f96b438fe378e64b0f5b2e8f67262a

enable dependabot for dependency updates (#11079)

* enable dependabot for dependency updates
* exclude dependabot config from license checks

.github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..70b92b3
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+version: 2
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    ignore:
+      - dependency-name: "com.google.guava:guava"

pom.xml

diff --git a/pom.xml b/pom.xml
index 9ef3206..2ef5d92 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1966,6 +1966,7 @@
                                 <exclude>LABELS</exclude>
                                 <exclude>.github/ISSUE_TEMPLATE/*.md</exclude>
                                 <exclude>.github/pull_request_template.md</exclude>
+                                <exclude>.github/dependabot.yml</exclude>
                                 <exclude>git.version</exclude>
                                 <exclude>node_modules/**</exclude>
                                 <exclude>src/**/*.snap</exclude>