-
Notifications
You must be signed in to change notification settings - Fork 913
Expand file tree
/
Copy pathdependabot.yml
More file actions
63 lines (61 loc) · 1.88 KB
/
Copy pathdependabot.yml
File metadata and controls
63 lines (61 loc) · 1.88 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
version: 2
updates:
- package-ecosystem: 'github-actions'
directory: '/'
schedule:
interval: 'monthly'
open-pull-requests-limit: 10
commit-message:
prefix: 'chore'
groups:
# Any updates not caught by the group config will get individual PRs
gha-low-risk:
update-types:
- 'minor'
- 'patch'
cooldown:
default-days: 7
- package-ecosystem: 'npm'
directory: '/'
schedule:
interval: 'monthly'
open-pull-requests-limit: 10
commit-message:
prefix: 'chore'
ignore:
# Prevent updates to ESM-only versions
- dependency-name: 'chalk'
versions: ['>=5.0.0']
- dependency-name: 'execa'
versions: ['>=6.0.0']
- dependency-name: 'inquirer'
versions: ['>=9.0.0']
- dependency-name: 'chai'
versions: ['>=5.0.0']
- dependency-name: 'conventional-commits-parser'
versions: ['>=6.0.0']
- dependency-name: 'chokidar'
versions: ['>=5.0.0']
# Prevent Webpack error caused by v0.11+ of esbuild
# @see https://github.com/dequelabs/axe-core/issues/3771
- dependency-name: 'esbuild'
versions: ['>=0.11.0']
# Prevent colorjs.io issue caused by >v0.4.3
# @see https://github.com/dequelabs/axe-core/issues/4428
- dependency-name: 'colorjs.io'
versions: ['>0.4.3']
# Use node 4 types for backward compatibility
- dependency-name: '@types/node'
versions: ['>=5.0.0']
# Breaking change that we need to handle in its own pr first
# @see https://github.com/dequelabs/axe-core/pull/4264
- dependency-name: 'css-selector-parser'
versions: ['>=2.0.0']
groups:
# Any updates not caught by the group config will get individual PRs
npm-low-risk:
update-types:
- 'minor'
- 'patch'
cooldown:
default-days: 7