asm-cheatsheet/.github/dependabot.yml at main · Ap6pack/asm-cheatsheet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
version: 2

updates:
  # Website dependencies. Grouped so routine patch/minor churn arrives as a few
  # reviewable PRs rather than dozens — the reason the previous backlog of
  # advisories went unaddressed.
  - package-ecosystem: npm
    directory: /website
    schedule:
      interval: weekly
      day: monday
    open-pull-requests-limit: 10
    labels:
      - dependencies
    groups:
      next:
        patterns:
          - "next"
          - "@next/*"
          - "eslint-config-next"
      react:
        patterns:
          - "react"
          - "react-dom"
          - "@types/react"
          - "@types/react-dom"
      radix:
        patterns:
          - "@radix-ui/*"
      dev-tooling:
        dependency-type: development
        patterns:
          - "*"
      production-minor-patch:
        dependency-type: production
        update-types:
          - minor
          - patch

  # Keep the CI workflow's actions current — stale action versions are their own
  # supply-chain risk.
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: monthly
    labels:
      - dependencies
      - ci