anthropic-skills/.github/dependabot.yml

91 lines
2.2 KiB
YAML

# Dependabot configuration for automated dependency updates
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Frontend dependencies (npm)
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 5
reviewers:
- "criptolandiatv"
assignees:
- "criptolandiatv"
commit-message:
prefix: "chore(deps)"
include: "scope"
labels:
- "dependencies"
- "frontend"
ignore:
# Ignore major version updates for stable dependencies
- dependency-name: "react"
update-types: ["version-update:semver-major"]
- dependency-name: "react-dom"
update-types: ["version-update:semver-major"]
# Group updates for related packages
groups:
react:
patterns:
- "react*"
testing:
patterns:
- "@testing-library/*"
- "vitest"
- "@vitest/*"
eslint:
patterns:
- "eslint*"
- "@typescript-eslint/*"
# Backend dependencies (pip/poetry)
- package-ecosystem: "pip"
directory: "/backend"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 5
reviewers:
- "criptolandiatv"
assignees:
- "criptolandiatv"
commit-message:
prefix: "chore(deps)"
include: "scope"
labels:
- "dependencies"
- "backend"
ignore:
# Ignore major version updates for framework
- dependency-name: "fastapi"
update-types: ["version-update:semver-major"]
- dependency-name: "pydantic"
update-types: ["version-update:semver-major"]
groups:
fastapi:
patterns:
- "fastapi*"
- "uvicorn*"
testing:
patterns:
- "pytest*"
# GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
open-pull-requests-limit: 3
reviewers:
- "criptolandiatv"
commit-message:
prefix: "ci"
labels:
- "dependencies"
- "github-actions"