From 9839dc14a02ddc6b6995e69eb3ecb98132fc8b6b Mon Sep 17 00:00:00 2001 From: Cory Miller <13227161+cory-miller@users.noreply.github.com> Date: Tue, 23 Apr 2024 13:02:51 -0400 Subject: [PATCH] Add dependabot config (#1688) * Add dependabot config * Group minor and patch updates for NPM and GH Actions --- .github/dependabot.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..4f6427b93 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +--- +version: 2 + +updates: +- package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + groups: + minor-npm-dependencies: + # NPM: Only group minor and patch updates (we want to carefully review major updates) + update-types: [minor, patch] +- package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + minor-actions-dependencies: + # GitHub Actions: Only group minor and patch updates (we want to carefully review major updates) + update-types: [minor, patch]