From 23d12c8820d2d285ebe8db0458274fc0b9e98818 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Wed, 28 Apr 2021 22:00:41 +0000 Subject: [PATCH] Upgrade to GitHub-native Dependabot --- .github/dependabot.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..b50007943 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,30 @@ +version: 2 +updates: +- package-ecosystem: npm + directory: "/" + schedule: + interval: monthly + open-pull-requests-limit: 10 + ignore: + - dependency-name: y18n + versions: + - 3.2.2 + - dependency-name: pug-code-gen + versions: + - 2.0.3 + - dependency-name: lodash + versions: + - 4.17.20 + - 4.17.21 + - dependency-name: ini + versions: + - 1.3.8 + - dependency-name: nodemon + versions: + - 2.0.6 + - dependency-name: dot-prop + versions: + - 4.2.1 + - dependency-name: pug + versions: + - 3.0.0