From 44c6f73e80b3c8e9ecf444e7e36eaa9c406a304b Mon Sep 17 00:00:00 2001
From: Davide D'Alto <davide@hibernate.org>
Date: Fri, 11 Jul 2025 16:29:19 +0200
Subject: [PATCH] [#1136] Update dependabot configuration

Includes:
* Update project dependencies
* Update images in Dockerfile files under tooling/docker/
* Update images we use as services in the GitHub workflow (mysql and
  postgres to test the examples)
---
 .github/dependabot.yml | 43 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4d1c7e327..0d4bc0776 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,3 +16,46 @@ updates:
     allow:
       - dependency-name: "actions/*"
       - dependency-name: "redhat-actions/*"
+
+  - package-ecosystem: "gradle"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "tuesday"
+    open-pull-requests-limit: 20
+    groups:
+      hibernate:
+        patterns:
+          - "org.hibernate*"
+      vertx:
+        patterns:
+          - "io.vertx*"
+      mutiny:
+        patterns:
+          - "io.smallrye.reactive*"
+      # Testcontainers plus the JDBC driver we need for testing
+      testcontainers:
+        patterns:
+          - "org.testcontainers*"
+          - "com.ibm.db2*"
+          - "com.microsoft.sqlserver*"
+          - "org.postgresql*"
+          - "con.ongres.scram*"
+          - "com.fasterxml.jackson.core*"
+          - "com.mysql*"
+          - "org.mariadb.jdbc*"
+
+    ignore:
+      # Only patches for Hibernate ORM and Vert.x
+      - dependency-name: "org.hibernate*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+      - dependency-name: "io.vertx*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+
+  # Dockerfiles in tooling/docker/, and database services we use for examples (MySQL and PostgreSQL)
+  - package-ecosystem: "docker"
+    directory: "/tooling/docker"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "all"