Merge pull request dandi#57 from dandi/rf-dependabot

Add dependabot.yml to explicitly disable pip updates
catalystneuro · Oct 18, 2023 · b87894b · b87894b
2 parents 4a54f5f + 97da765
commit b87894b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  # do not provide pip upgrades -- notebooks might need specific versions
+  - package-ecosystem: "pip"
+    directory: "/"
+    ignore:
+      - dependency-name: "*"