Skip to content

Commit 65d9f35

Browse files
committed
fix: update dependabot configuration to better handle security vulnerabilities
1 parent e1466c4 commit 65d9f35

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

.github/dependabot.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,16 @@
11
version: 2
22
updates:
3-
# Update npm dependencies
43
- package-ecosystem: "npm"
5-
directory: "/sim" # Location of package.json
4+
directory: "/sim"
65
schedule:
76
interval: "weekly"
8-
open-pull-requests-limit: 5 # Start conservative to manage review load
7+
open-pull-requests-limit: 10
98
labels:
109
- "dependencies"
11-
# Group related dependencies to reduce PR volume
10+
- "security"
11+
commit-message:
12+
prefix: "fix"
13+
include: "scope"
1214
groups:
1315
development-tools:
1416
patterns:
@@ -23,13 +25,11 @@ updates:
2325
patterns:
2426
- "react*"
2527
- "next*"
26-
# Auto-merge configuration should be at this level
2728
target-branch: "main"
2829
versioning-strategy: auto
2930
pull-request-branch-name:
3031
separator: "-"
3132

32-
# Also check for GitHub Actions updates
3333
- package-ecosystem: "github-actions"
3434
directory: "/"
3535
schedule:

0 commit comments

Comments
 (0)