proposal-system/.github/dependabot.yml
Adam Moussa f35070114a chore(deps): remove blanket aws-cdk-lib dependabot ignore
Per handbook Pinning Principle: exact pins are kept current by Dependabot version updates gated by CI + dependency review. Blanket ignores let pins rot (see today's fast-uri incident).
2026-06-05 13:56:29 -04:00

77 lines
1.4 KiB
YAML

version: 2
updates:
- package-ecosystem: npm
directory: /infra
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: npm
directory: /web
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: npm
directory: /mobile
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: bundler
directory: /mobile
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: nuget
directory: /api
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: pip
directory: /lambdas/pdf-extract
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: pip
directory: /lambdas/pdf-generate
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: pip
directory: /lambdas/library-ingest
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: pip
directory: /lambdas/suggestions
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: pip
directory: /lambdas/oss-index-creator
schedule:
interval: weekly
open-pull-requests-limit: 5
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
open-pull-requests-limit: 5