mirror of
https://github.com/github/codeql-action.git
synced 2026-11-05 04:29:40 +00:00
51 lines
1.4 KiB
YAML
51 lines
1.4 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: npm
|
|
directories:
|
|
- "/"
|
|
- "/pr-checks"
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
labels:
|
|
- Rebuild
|
|
# Ignore incompatible dependency updates
|
|
ignore:
|
|
# This is broken due to the way configuration files have changed.
|
|
# This might be fixed when we move to eslint v9.
|
|
- dependency-name: "eslint-plugin-import"
|
|
versions: [">=2.30.0"]
|
|
|
|
# Some of our dependencies are lagging behind with support for new versions of
|
|
# `undici` which is why we have to override it in `package.json`. Dependabot
|
|
# workflows fail when they try to update a dependency that is explicitly
|
|
# overriden. Since this happens somewhat routinely at the moment, we are
|
|
# excluding `undici` here and have to manually update it when needed.
|
|
- dependency-name: "undici"
|
|
versions: [">=7.30.1"]
|
|
groups:
|
|
npm-minor:
|
|
patterns:
|
|
- "*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
- package-ecosystem: github-actions
|
|
directories:
|
|
- "/.github/workflows"
|
|
- "/.github/actions/*/"
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
labels:
|
|
- Rebuild
|
|
groups:
|
|
actions-minor:
|
|
patterns:
|
|
- "*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|