diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f33a02c..65ce327 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,12 +1,29 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for more information: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates -# https://containers.dev/guide/dependabot +# This is the dependabot configuration file that automates dependency updates +# Updates section configures how dependabot should handle dependency updates: +# - Monitors devcontainer features in the root directory (though convention is .devcontainer and it should check there by default) +# - Monitors NPM dependencies in the possible-solutions directory +# - Checks for updates weekly +# - Groups updates based on their type (dev grouped by minor/patch or prod grouped by patch) +# +# Learn more at https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#configuration-options-for-the-dependabotyml-file version: 2 updates: - - package-ecosystem: "devcontainers" - directory: "/" - schedule: - interval: weekly + - package-ecosystem: "devcontainers" + directory: "/" + schedule: + interval: weekly + - package-ecosystem: npm + directory: /possible-solutions/ + schedule: + interval: weekly + groups: + npm-development: + dependency-type: development + update-types: + - minor + - patch + npm-production: + dependency-type: production + update-types: + - patch