Browse Source

chore: add Dependabot configuration file (#256)

pull/260/head
Ned Zimmerman 4 years ago committed by GitHub
parent
commit
563ede329d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 27
      .github/dependabot.yml

27
.github/dependabot.yml

@ -0,0 +1,27 @@
version: 2
updates:
# Maintain dependencies for npm
- package-ecosystem: "npm"
# Look for `package.json` and `package-lock.json` files in the root directory
directory: "/"
# Check for updates monthly
schedule:
interval: "monthly"
allow:
# Allow direct updates only (for packages named in package.json)
- dependency-type: "direct"
# Allow up to 10 open pull requests for npm dependencies
open-pull-requests-limit: 10
# Maintain dependencies for Composer
- package-ecosystem: "composer"
# Look for `composer.json` and `composer.lock` files in the root directory
directory: "/"
# Check for updates monthly
schedule:
interval: "monthly"
allow:
# Allow direct updates only (for packages named in composer.json)
- dependency-type: "direct"
# Allow up to 10 open pull requests for composer dependencies
open-pull-requests-limit: 10
Loading…
Cancel
Save