Update dependbot & add gradle and scala

.github/dependabot.yml

@@ -4,20 +4,52 @@
 # https://github.com/proxy/docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
 version: 2
 updates:
-  - package-ecosystem: "maven" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
-    # wait after a new release till we create a PR, to reduce risk of pulling
-    # a compromised new version
-    cooldown:
-      default-days: 7
-      # Exclude our own repos from cooldown
-      # https://github.com/proxy/docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
-      exclude:
-        - "org.jboss.da:*"
-        - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
-        - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+  #
+  # Uncomment the appropriate ecosystem for each repository
+  #
+  # - package-ecosystem: "gradle"
+  #   directory: "/" # Location of package manifests
+  #   schedule:
+  #     interval: "weekly"
+  #   # wait after a new release till we create a PR, to reduce risk of pulling
+  #   # a compromised new version
+  #   cooldown:
+  #     default-days: 7
+  #     # Exclude our own repos from cooldown
+  #     # https://github.com/proxy/docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
+  #     exclude:
+  #       - "org.jboss.da:*"
+  #       - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+  #       - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+  # - package-ecosystem: "sbt"
+  #   directory: "/" # Location of package manifests
+  #   schedule:
+  #     interval: "weekly"
+  #   # wait after a new release till we create a PR, to reduce risk of pulling
+  #   # a compromised new version
+  #   cooldown:
+  #     default-days: 7
+  #     # Exclude our own repos from cooldown
+  #     # https://github.com/proxy/docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
+  #     exclude:
+  #       - "org.jboss.da:*"
+  #       - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+  #       - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+  # - package-ecosystem: "maven"
+  #   directory: "/" # Location of package manifests
+  #   schedule:
+  #     interval: "weekly"
+  #   # wait after a new release till we create a PR, to reduce risk of pulling
+  #   # a compromised new version
+  #   cooldown:
+  #     default-days: 7
+  #     # Exclude our own repos from cooldown
+  #     # https://github.com/proxy/docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
+  #     exclude:
+  #       - "org.jboss.da:*"
+  #       - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+  #       - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+
   - package-ecosystem: "github-actions" # Also update Github actions
     directory: "/"
     schedule:

README.md

@@ -477,6 +477,8 @@ Also has a `TAGS` property to associate Mend scan run with some data (e.g. branc
 
 A sample dependabot file in `.github/dependabot.yml` is available that is both used in this repository and may be copied to other ProjectNCL repositories.
 
+**NOTE** - the developer must uncomment the appropriate package ecosystem when copying the file.
+
 ## GitHub Releases
 A sample `.github/release.yml` configuration file from the [GitHub documentation](https://github.com/proxy/docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes#configuring-automatically-generated-release-notes) has been added that may be copied to other ProjectNCL repositories.