Mirror of https://github.com/roostorg/coop
github.com/roostorg/coop
dependabot: ignore major version updates (#358)
+23
-1
+23
-1
.github/dependabot.yml
+23
-1
.github/dependabot.yml
···
2
2
# package ecosystems to update and where the package manifests are located.
3
3
# Please see the documentation for all configuration options:
4
4
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
5
+
#
6
+
# Major version updates are disabled for now across every ecosystem/directory.
7
+
# Security updates are unaffected (Dependabot ignores `ignore` rules for
8
+
# security advisories), so majors still land when they fix a vulnerability.
5
9
6
10
version: 2
7
11
updates:
···
16
20
schedule:
17
21
interval: "weekly"
18
22
ignore:
19
-
- dependency-name: "node"
23
+
- dependency-name: "*"
20
24
update-types: ["version-update:semver-major"]
21
25
22
26
# Enable version updates for npm
···
24
28
directory: '/'
25
29
schedule:
26
30
interval: 'weekly'
31
+
ignore:
32
+
- dependency-name: '*'
33
+
update-types: ['version-update:semver-major']
27
34
groups:
28
35
root-prod-security:
29
36
dependency-type: 'production'
···
45
52
directory: '/db'
46
53
schedule:
47
54
interval: 'weekly'
55
+
ignore:
56
+
- dependency-name: '*'
57
+
update-types: ['version-update:semver-major']
48
58
groups:
49
59
db-prod-security:
50
60
dependency-type: 'production'
···
66
76
directory: '/migrator'
67
77
schedule:
68
78
interval: 'weekly'
79
+
ignore:
80
+
- dependency-name: '*'
81
+
update-types: ['version-update:semver-major']
69
82
groups:
70
83
migrator-prod-security:
71
84
dependency-type: 'production'
···
87
100
directory: '/server'
88
101
schedule:
89
102
interval: 'weekly'
103
+
ignore:
104
+
- dependency-name: '*'
105
+
update-types: ['version-update:semver-major']
90
106
groups:
91
107
server-prod-security:
92
108
dependency-type: 'production'
···
108
124
directory: '/client'
109
125
schedule:
110
126
interval: 'weekly'
127
+
ignore:
128
+
- dependency-name: '*'
129
+
update-types: ['version-update:semver-major']
111
130
groups:
112
131
client-prod-security:
113
132
dependency-type: 'production'
···
129
148
directory: '/nodejs-instrumentation'
130
149
schedule:
131
150
interval: 'weekly'
151
+
ignore:
152
+
- dependency-name: '*'
153
+
update-types: ['version-update:semver-major']
132
154
groups:
133
155
nodejs-instrumentation-prod-security:
134
156
dependency-type: 'production'