2a12cde1e2
As our number of dependencies grows, it results in large PRs that are difficult to review. The recent aws-sdk-s3 failures highlight the need for us to be more cautious with these updates. Dependabot has a feature that allows us to group updates by type, enabling us to update development dependencies separately from production dependencies.
44 lines
928 B
YAML
44 lines
928 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: 'bundler'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'daily'
|
|
allow:
|
|
- dependency-type: "all"
|
|
groups:
|
|
production-dependencies:
|
|
dependency-type: "production"
|
|
development-dependencies:
|
|
dependency-type: "development"
|
|
- package-ecosystem: 'npm'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'weekly'
|
|
allow:
|
|
- dependency-type: "all"
|
|
groups:
|
|
js-dependencies:
|
|
patterns:
|
|
- "*"
|
|
- package-ecosystem: 'docker'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'weekly'
|
|
allow:
|
|
- dependency-type: "all"
|
|
groups:
|
|
docker-dependencies:
|
|
patterns:
|
|
- "*"
|
|
- package-ecosystem: 'github-actions'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'weekly'
|
|
allow:
|
|
- dependency-type: "all"
|
|
groups:
|
|
github-actions-dependencies:
|
|
patterns:
|
|
- "*"
|