From 63510bcfc272bf00d319f96cbc7fa48998b4d105 Mon Sep 17 00:00:00 2001 From: Enow Scott <148756598+Blindspot22@users.noreply.github.com> Date: Thu, 14 Nov 2024 17:12:14 +0100 Subject: [PATCH] Update dependabot.yml --- .github/dependabot.yml | 30 ++++++++++++++++++++++-------- 1 file changed, 22 insertions(+), 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5990d9c..053b5f2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,11 +1,25 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - version: 2 updates: - - package-ecosystem: "" # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: "npm" + directory: "/" schedule: - interval: "weekly" + interval: "weekly" # + day: "monday" + time: "04:00" + commit-message: + prefix: "chore(deps)" + include: "scope" + pull-request-branch-name: + prefix: "dependabot" + versioning-strategy: "increase" + ignore: + - dependency-name: "express" + versions: ["4.x"] + labels: + - "dependencies" + - "security" + reviewers: + - "reviewer1" + assignees: + - "username" + open-pull-requests-limit: 100