mirror of
https://github.com/keycloak/keycloak.git
synced 2025-12-16 20:15:46 -06:00
6bce46c842
This PR uses dependabot.yml groups key to controls version updates. It tells Dependabot to bundle regular package upgrades (e.g., npm or github-actions) into a single pull request based on your rules. Additional step: Enable in the repository settings grouped updates: This setting controls security updates. Enabling this tells Dependabot to bundle all available security patches (i.e., updates that fix vulnerabilities) into a single pull request, separate from our version updates. See: https://github.blog/changelog/2024-03-28-dependabot-grouped-security-updates-generally-available/ Signed-off-by: Bruno Oliveira da Silva <bruno@abstractj.com>
49 lines
1.4 KiB
YAML
49 lines
1.4 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
day: "sunday"
|
|
time: "03:00"
|
|
timezone: Etc/GMT
|
|
open-pull-requests-limit: 10 # It's wise to keep this low even with grouping
|
|
rebase-strategy: disabled
|
|
labels:
|
|
- area/dependencies
|
|
- area/ci
|
|
groups:
|
|
actions-dependencies: # This name will be used in the PR title
|
|
patterns:
|
|
- "*"
|
|
|
|
- package-ecosystem: npm
|
|
directory: js
|
|
schedule:
|
|
interval: weekly
|
|
day: "thursday"
|
|
time: "03:00"
|
|
timezone: Etc/GMT
|
|
open-pull-requests-limit: 10 # It's wise to keep this low even with grouping
|
|
rebase-strategy: disabled
|
|
labels:
|
|
- area/dependencies
|
|
- team/ui
|
|
ignore:
|
|
- dependency-name: "@patternfly/*"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: react
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: react-dom
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "@types/react"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "@types/react-dom"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "react-router-dom"
|
|
update-types: ["version-update:semver-major"]
|
|
groups:
|
|
npm-dependencies: # This name will be used in the PR title
|
|
patterns:
|
|
- "*"
|