FilesExpand file tree

main

/

dependabot.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

109 lines (108 loc) · 2.63 KB

main

/

dependabot.yml

Copy path

Top

File metadata and controls

• Code
• Blame

109 lines (108 loc) · 2.63 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

version: 2

updates:

# Enable version updates for npm dependencies

- package-ecosystem: "npm"

directory: "/"

schedule:

interval: "weekly"

day: "monday"

time: "09:00"

timezone: "UTC"

open-pull-requests-limit: 10

reviewers:

- "fluxhttp-team"

assignees:

- "fluxhttp-team"

commit-message:

prefix: "deps"

prefix-development: "deps-dev"

include: "scope"

labels:

- "dependencies"

- "automated"

# Semantic versioning preferences

versioning-strategy: increase

# Group related updates

groups:

typescript-ecosystem:

patterns:

- "typescript"

- "@types/*"

- "@typescript-eslint/*"

update-types:

- "minor"

- "patch"

build-tools:

patterns:

- "tsup"

- "esbuild"

- "rollup"

- "webpack"

- "vite"

update-types:

- "minor"

- "patch"

testing-tools:

patterns:

- "*test*"

- "*spec*"

- "c8"

- "nyc"

- "jest"

- "vitest"

- "mocha"

- "chai"

update-types:

- "minor"

- "patch"

linting-tools:

patterns:

- "eslint"

- "eslint-*"

- "prettier"

- "@eslint/*"

update-types:

- "minor"

- "patch"

# Ignore specific packages that might cause breaking changes

ignore:

# Ignore major version updates for critical dependencies during stable releases

- dependency-name: "node"

update-types: ["version-update:semver-major"]

# Ignore pre-release versions

- dependency-name: "*"

update-types: ["version-update:semver-major"]

# Enable major updates only for patch releases

# Auto-merge configuration for low-risk updates

# Note: This requires branch protection rules to be properly configured

# pull-request-branch-name:

# separator: "/"

# Enable version updates for GitHub Actions

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "weekly"

day: "monday"

time: "10:00"

timezone: "UTC"

open-pull-requests-limit: 5

reviewers:

- "fluxhttp-team"

assignees:

- "fluxhttp-team"

commit-message:

prefix: "ci"

include: "scope"

labels:

- "github-actions"

- "ci"

- "automated"

# Group all GitHub Actions updates together

groups:

github-actions:

patterns:

- "*"

update-types:

- "minor"

- "patch"

- "major"