dependabot should bump only direct dependencies (#1672)

GoogleCloudPlatform · Jan 31, 2024 · cb7de7b · cb7de7b
1 parent 635ed90
commit cb7de7b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -8,7 +8,7 @@ updates:
 - package-ecosystem: gomod
   directory: "/"
   allow:
-  - dependency-type: "all"
+  - dependency-type: "direct"
   schedule:
     interval: weekly
   open-pull-requests-limit: 10