dependabot.yml 676 B

123456789101112131415161718192021222324252627282930
  1. version: 2
  2. updates:
  3. # GitHub Actions — keeps workflow action versions (and their SHA pins) current.
  4. - package-ecosystem: github-actions
  5. directory: /
  6. schedule:
  7. interval: weekly
  8. open-pull-requests-limit: 5
  9. groups:
  10. github-actions:
  11. patterns:
  12. - "*"
  13. commit-message:
  14. prefix: "ci"
  15. # pnpm owns the single repository lockfile for all workspace packages.
  16. - package-ecosystem: npm
  17. directory: /
  18. schedule:
  19. interval: weekly
  20. cooldown:
  21. default-days: 3
  22. open-pull-requests-limit: 5
  23. groups:
  24. workspace-dependencies:
  25. patterns:
  26. - "*"
  27. commit-message:
  28. prefix: "deps"