mirror of
https://github.com/simstudioai/sim.git
synced 2026-01-09 15:07:55 -05:00
fix: update dependabot configuration to better handle security vulnerabilities
This commit is contained in:
12
.github/dependabot.yml
vendored
12
.github/dependabot.yml
vendored
@@ -1,14 +1,16 @@
|
||||
version: 2
|
||||
updates:
|
||||
# Update npm dependencies
|
||||
- package-ecosystem: "npm"
|
||||
directory: "/sim" # Location of package.json
|
||||
directory: "/sim"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
open-pull-requests-limit: 5 # Start conservative to manage review load
|
||||
open-pull-requests-limit: 10
|
||||
labels:
|
||||
- "dependencies"
|
||||
# Group related dependencies to reduce PR volume
|
||||
- "security"
|
||||
commit-message:
|
||||
prefix: "fix"
|
||||
include: "scope"
|
||||
groups:
|
||||
development-tools:
|
||||
patterns:
|
||||
@@ -23,13 +25,11 @@ updates:
|
||||
patterns:
|
||||
- "react*"
|
||||
- "next*"
|
||||
# Auto-merge configuration should be at this level
|
||||
target-branch: "main"
|
||||
versioning-strategy: auto
|
||||
pull-request-branch-name:
|
||||
separator: "-"
|
||||
|
||||
# Also check for GitHub Actions updates
|
||||
- package-ecosystem: "github-actions"
|
||||
directory: "/"
|
||||
schedule:
|
||||
|
||||
Reference in New Issue
Block a user