Adam Moussa
8b317e1d9c
Per handbook Pinning Principle: exact pins are kept current by Dependabot version updates gated by CI + dependency review. Blanket ignores let pins rot (see today's fast-uri incident).
11 lines
204 B
YAML
11 lines
204 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|