From 7812ed7c801b309901f2d8d95f4118ca2309a451 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Thu, 29 Apr 2021 19:33:51 +0000 Subject: [PATCH] Upgrade to GitHub-native Dependabot --- .github/dependabot.yml | 49 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..15de39a5 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,49 @@ +version: 2 +registries: + npm-registry-registry-npmjs-org: + type: npm-registry + url: https://registry.npmjs.org + token: "${{secrets.NPM_REGISTRY_REGISTRY_NPMJS_ORG_TOKEN}}" + +updates: +- package-ecosystem: npm + directory: "/" + schedule: + interval: weekly + time: "07:00" + open-pull-requests-limit: 10 + ignore: + - dependency-name: "@types/node" + versions: + - 14.14.22 + - 14.14.25 + - 14.14.28 + - 14.14.31 + - 14.14.32 + - 14.14.34 + - 14.14.35 + - 14.14.37 + - dependency-name: husky + versions: + - 4.3.8 + - 5.0.9 + - 5.1.0 + - 5.1.2 + - 5.1.3 + - 5.2.0 + - dependency-name: typescript + versions: + - 4.1.3 + - 4.1.5 + - 4.2.2 + - 4.2.3 + - dependency-name: mocha + versions: + - 8.2.1 + - 8.3.0 + - 8.3.1 + - dependency-name: lodash + versions: + - 4.17.20 + registries: + - npm-registry-registry-npmjs-org