Skip to content

Commit

Permalink
fix/dependabot
Browse files Browse the repository at this point in the history
Github manages dependabot security notices automatically. We will manage dependency updates manually
  • Loading branch information
tyrauber committed Jul 15, 2024
1 parent 39233b1 commit f828545
Showing 1 changed file with 3 additions and 75 deletions.
78 changes: 3 additions & 75 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -1,80 +1,8 @@
version: 2
updates:
# root
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "monthly"
labels:
- "🤖 dependabot 🤖"
open-pull-requests-limit: 99
pull-request-branch-name:
separator: "-"
ignore: # ignore updates for react-native deps, think about updating, once react-native is updated
- dependency-name: "@babel/core"
- dependency-name: "@babel/runtime"
- dependency-name: "@react-native-community/eslint-config"
- dependency-name: "eslint"
- dependency-name: "jest"
- dependency-name: "metro-react-native-babel-preset"
- dependency-name: "react-test-renderer"
- dependency-name: "react"
- dependency-name: "react-native"
- dependency-name: "jest-cli"
- dependency-name: "@types/react"
- dependency-name: "@types/react-native"
- dependency-name: "@types/jest"
# example
- package-ecosystem: "npm"
directory: "/example"
schedule:
interval: "monthly"
labels:
- "🤖 dependabot 🤖"
open-pull-requests-limit: 99
pull-request-branch-name:
separator: "-"
# gh-actions workflow files
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
groups:
core:
patterns:
- "react"
- "react-native"
- "@mapbox/*"
- "@turf/*"
- "@expo/config-plugins"
dev:
patterns:
- "jest"
- "@testing*"
- "@types/*"
- "typescript"
- "@babel/*"
- "babel*"
- "@typescript-eslint/*"
- "eslint-*"
- "eslint"
- "lint*"
- "@react-native-community/*"
- "documentation"
- "ejs*"
- "husky"
- "metro-*"
- "prettier"
example:
patterns:
- "expo*"
- "react-*"
- "react-native*"
- "@react-native*"
- "@react-navigation*"
- "fbjs"
- "detox"
pull-request-branch-name:
separator: "-"
labels:
- "🤖 dependabot 🤖"
interval: "weekly"
# Disable version updates for npm dependencies
open-pull-requests-limit: 0

0 comments on commit f828545

Please sign in to comment.