Add dependabot config (#1688)

* Add dependabot config
* Group minor and patch updates for NPM and GH Actions
This commit is contained in:
Cory Miller 2024-04-23 13:02:51 -04:00 committed by GitHub
parent 9b4c13b0bf
commit 9839dc14a0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

20
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,20 @@
---
version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-npm-dependencies:
# NPM: Only group minor and patch updates (we want to carefully review major updates)
update-types: [minor, patch]
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-actions-dependencies:
# GitHub Actions: Only group minor and patch updates (we want to carefully review major updates)
update-types: [minor, patch]