From d5fa49172a776266ab5c2656f8532f4586ddf073 Mon Sep 17 00:00:00 2001
From: modem7 <modem7@gmail.com>
Date: Wed, 23 Mar 2022 22:55:48 +0000
Subject: [PATCH 1/2] Create dependabot.yml

This will assist with version updates and vulnerability scans.

Dependabot scans will need to be enabled in the repo itself under https://github.com/AmruthPillai/Reactive-Resume/settings/security_analysis

It would also be worthwhile pairing this with Snyk (https://app.snyk.io/) for vulnerability monitoring.
---
 .github/dependabot.yml | 62 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 62 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..cf81e8da4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,62 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "docker" # See documentation for possible values
+    directory: "/server" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "docker" # See documentation for possible values
+    directory: "/client" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/client" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/server" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/schema" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/docs" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
+  - package-ecosystem: "github-actions"
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
\ No newline at end of file

From f3b3fe8ac996b010cf9ed1fec2a3323b1c1592de Mon Sep 17 00:00:00 2001
From: modem7 <modem7@gmail.com>
Date: Thu, 24 Mar 2022 00:47:21 +0000
Subject: [PATCH 2/2] Update dependabot.yml

added gradle
---
 .github/dependabot.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cf81e8da4..836c715b4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -54,6 +54,13 @@ updates:
     assignees:
       - "AmruthPillai"
 
+  - package-ecosystem: "gradle" # See documentation for possible values
+    directory: "/app" # Location of package manifests
+    schedule:
+      interval: "daily"
+    assignees:
+      - "AmruthPillai"
+
   - package-ecosystem: "github-actions"
     directory: "/" # Location of package manifests
     schedule: