codeql-action/.github/dependabot.yml at default-setup-testing · github/codeql-action · GitHub

Repository navigation

History

version: 2

updates:

- package-ecosystem: npm

directories:

- "/"

- "/pr-checks"

schedule:

interval: weekly

cooldown:

default-days: 7

labels:

- Rebuild

# Ignore incompatible dependency updates

ignore:

# This is broken due to the way configuration files have changed.

# This might be fixed when we move to eslint v9.

- dependency-name: "eslint-plugin-import"

versions: [">=2.30.0"]

# Some of our dependencies are lagging behind with support for new versions of

# `undici` which is why we have to override it in `package.json`. Dependabot

# workflows fail when they try to update a dependency that is explicitly

# overriden. Since this happens somewhat routinely at the moment, we are

# excluding `undici` here and have to manually update it when needed.

- dependency-name: "undici"

versions: [">=7.30.1"]

groups:

npm-minor:

patterns:

- "*"

update-types:

- "minor"

- "patch"

- package-ecosystem: github-actions

directories:

- "/.github/workflows"

- "/.github/actions/*/"