From 49532bfabbceb11e0d30c59c832719faa08c9fc6 Mon Sep 17 00:00:00 2001 From: Maxime Zanot <47531779+MrChocolatine@users.noreply.github.com> Date: Fri, 13 Mar 2020 16:35:08 +0100 Subject: [PATCH] feat(dependabot): create configuration file Create basic configuration file for @dependabot. --- .dependabot/config.yml | 94 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 .dependabot/config.yml diff --git a/.dependabot/config.yml b/.dependabot/config.yml new file mode 100644 index 00000000..09014edb --- /dev/null +++ b/.dependabot/config.yml @@ -0,0 +1,94 @@ +# Documentation : +# https://dependabot.com/docs/config-file/ + +# Validator for Dependabot config file +# https://dependabot.com/docs/config-file/validator/ + +version: 1 + +update_configs: + - package_manager: "javascript" + + # Where to look for package manifests. Relative to the repository's root. + directory: "/" + + # How often to check for non-security updates and when to create pull requests. + # Security updates are always created as soon as possible (i.e., "live"). + update_schedule: "monthly" + + # How to update manifest version requirements. + # "auto" => version requirements increased if it's an app / range widened if it's a library. + version_requirement_updates: "auto" + + # Format of commit messages and pull request titles. + commit_message: + prefix: "build" + include_scope: true + + # Reviewers to set on pull requests + default_reviewers: + - "peopledoc/tribe-js" + + # Limit which updates are allowed + allowed_updates: + - match: + update_type: "all" # all updates including indirect/sub-dependencies + + # Regarding Ember, as `ember-cli-update` is already in charge of updating the related packages, + # we should tell Dependabot to ignore these. + # To do so, go to https://github.com/ember-cli/ember-new-output if your project is an app, or + # https://github.com/ember-cli/ember-addon-output if your project is an add-on, select the Tag + # corresponding to your version, open the file `package.json` and refer to the `devDependencies` + # key to get the list of first-party dependencies handled by Ember. + # Add every package you see in the list below. + ignored_updates: + # Beginning of Ember first-party dependencies + - match: + dependency_name: "@ember/optional-features" + - match: + dependency_name: "babel-eslint" + - match: + dependency_name: "broccoli-asset-rev" + - match: + dependency_name: "ember-auto-import" + - match: + dependency_name: "ember-cli" + - match: + dependency_name: "ember-cli-dependency-checker" + - match: + dependency_name: "ember-cli-eslint" + - match: + dependency_name: "ember-cli-inject-live-reload" + - match: + dependency_name: "ember-cli-sri" + - match: + dependency_name: "ember-cli-template-lint" + - match: + dependency_name: "ember-cli-uglify" + - match: + dependency_name: "ember-disable-prototype-extensions" + - match: + dependency_name: "ember-export-application-global" + - match: + dependency_name: "ember-load-initializers" + - match: + dependency_name: "ember-maybe-import-regenerator" + - match: + dependency_name: "ember-qunit" + - match: + dependency_name: "ember-resolver" + - match: + dependency_name: "ember-source" + - match: + dependency_name: "ember-source-channel-url" + - match: + dependency_name: "ember-try" + - match: + dependency_name: "eslint-plugin-ember" + - match: + dependency_name: "eslint-plugin-node" + - match: + dependency_name: "loader.js" + - match: + dependency_name: "qunit-dom" + # End of Ember first-party dependencies