paperclip/.github/dependabot.yml

36 lines
1.1 KiB
YAML

version: 2
updates:
- package-ecosystem: npm
directory: "/"
schedule:
interval: weekly
day: monday
time: "06:00"
open-pull-requests-limit: 10
labels:
- "dependencies"
groups:
# Bundle all patch/minor updates of the same dependency type into one
# weekly PR. Prevents partial bumps of sibling packages that share
# peer dependencies (e.g. lexical + @lexical/*), which otherwise
# install two copies of the core package and break type-checking.
# Majors stay as individual PRs (and are ignored below anyway).
production-dependencies:
dependency-type: "production"
update-types: ["patch", "minor"]
development-dependencies:
dependency-type: "development"
update-types: ["patch", "minor"]
ignore:
# Ignore major version bumps — review those manually
- dependency-name: "*"
update-types: ["version-update:semver-major"]
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
day: monday
time: "06:00"
open-pull-requests-limit: 5