2021-09-17 09:55:50 +00:00
|
|
|
# configure dependabot automatic dependency upgrades (PRs)
|
|
|
|
|
#
|
|
|
|
|
# @see https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
|
2020-12-09 10:26:06 +00:00
|
|
|
|
|
|
|
|
version: 2
|
|
|
|
|
updates:
|
|
|
|
|
- package-ecosystem: "npm"
|
|
|
|
|
directory: "/"
|
|
|
|
|
schedule:
|
|
|
|
|
interval: "monthly"
|
|
|
|
|
day: "monday"
|
|
|
|
|
time: "09:00"
|
|
|
|
|
timezone: "Europe/Berlin"
|
|
|
|
|
reviewers: # Automatically assign reviewer
|
|
|
|
|
- "bpmn-io/modeling-dev"
|
|
|
|
|
commit-message:
|
2021-05-26 08:55:37 +00:00
|
|
|
prefix: "deps:"
|
2020-12-09 10:26:06 +00:00
|
|
|
versioning-strategy: "increase-if-necessary"
|
|
|
|
|
# Disable version updates unless they are for security reasons.
|
|
|
|
|
open-pull-requests-limit: 0
|
