Adam Moussa
c4b1230d9b
Per handbook Pinning Principle: exact pins are kept current by Dependabot version updates gated by CI + dependency review. Blanket ignores let pins rot (see today's fast-uri incident).
29 lines
583 B
YAML
29 lines
583 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
- package-ecosystem: "pip"
|
|
directory: "/src"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
- package-ecosystem: "pip"
|
|
directory: "/listener"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|