.github/dependabot.yml - trunk - githubmirror/gutenberg

.github/dependabot.yml

35 строк957 B

Jonathan Desrosiers

Monitor all setup-related composite Actions. (#81192)

10 авг 2026, 19:31

10 авг 2026, 19:31f8466c3

# Configure Dependabot scanning.
version: 2

updates:
    # Check for updates to GitHub Actions.
    - package-ecosystem: 'github-actions'
      directories:
          - '.github/workflows'
          - '.github/setup-*'
      schedule:
          interval: 'daily'
      open-pull-requests-limit: 20
      cooldown:
          default-days: 7
      labels:
          - 'GitHub Actions'
          - '[Type] Build Tooling'
      groups:
          github-actions:
              applies-to: version-updates
              update-types:
                  - minor
                  - patch

    # Manage npm security updates only.
    - package-ecosystem: 'npm'
      directory: '/'
      schedule:
          interval: 'daily'
      # disables noisy npm *version* updates across the monorepo;
      # *security* updates ignore this limit and keep running.
      open-pull-requests-limit: 0
      labels:
          - 'dependencies'
          - '[Type] Build Tooling'