forgejo/.github/dependabot.yml
2026-08-04 11:33:34 -04:00

36 lines
1 KiB
YAML

version: 2
updates:
- package-ecosystem: npm
directory: /
schedule:
interval: weekly
commit-message:
prefix: "chore(deps)"
assignees:
- amoussa1229
ignore:
# @types/node must track the runtime Node major, not the latest release.
# Pure-CDK repo: the runtime is the Node that runs `cdk synth`/`tsc` in CI.
# Dependabot can't see that and a too-new types major still compiles (passes
# CI, wrong at runtime). Sanctioned exception to the no-blanket-ignore rule
# (engineering-handbook github-standards Pinning Principle). Minor/patch flow.
- dependency-name: "@types/node"
update-types: ["version-update:semver-major"]
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
commit-message:
prefix: "chore(deps)"
assignees:
- amoussa1229
- package-ecosystem: pip
directory: /lambda/backup-verification
schedule:
interval: weekly
commit-message:
prefix: "chore(deps)"
assignees:
- amoussa1229