From 9caf9e1edf27a2b63f74d7baa9ce80a5ecbd41ad Mon Sep 17 00:00:00 2001 From: "Erin E. Sullivan" Date: Tue, 3 Sep 2024 11:05:29 -0400 Subject: [PATCH 1/2] Updating `dependabot.yml` to group `npm` and `github-actions` updates in their own pull requests. --- .github/dependabot.yml | 57 +++++++++++++++++++++++++----------------- 1 file changed, 34 insertions(+), 23 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index cd1f8f4..c0d5ddb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,34 +1,45 @@ version: 2 updates: - # Enable version updates for npm - - package-ecosystem: npm - # Look for `package.json` and `lock` files in the `root` directory - directory: / - # Check the npm registry for updates every first day of the month at 6am EST + # For npm dependencies + - package-ecosystem: "npm" + directory: "/" schedule: - interval: monthly - timezone: America/Detroit + interval: "monthly" time: "06:00" - # Exclude `chai` as it is a breaking change - ignore: - - dependency-name: chai - # Assign to the lead developer + day: "monday" + timezone: "America/Detroit" + commit-message: + prefix: "deps" + include: "scope" + open-pull-requests-limit: 5 assignees: - - erinesullivan - # Add the `dependencies` label + - "erinesullivan" labels: - - dependencies - # Let dependabot create up to 10 PRs at a time - open-pull-requests-limit: 10 + - "dependencies" + ignore: + - dependency-name: "chai" + groups: + group-all-npm-updates: + patterns: + - "*" - # Enable version updates for GitHub Actions with similar scheduling details - - package-ecosystem: github-actions - directory: / + # For GitHub Actions updates + - package-ecosystem: "github-actions" + directory: "/" schedule: - interval: monthly - timezone: America/Detroit + interval: "monthly" time: "06:00" + day: "monday" + timezone: "America/Detroit" + commit-message: + prefix: "deps" + include: "scope" + open-pull-requests-limit: 5 assignees: - - erinesullivan + - "erinesullivan" labels: - - dependencies + - "dependencies" + groups: + group-all-github-actions-updates: + patterns: + - "*" \ No newline at end of file From 2ceea2ef1269d63710d36c93ac36c6179493b6a3 Mon Sep 17 00:00:00 2001 From: "Erin E. Sullivan" Date: Tue, 3 Sep 2024 11:08:04 -0400 Subject: [PATCH 2/2] Appeasing the new line gods. --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c0d5ddb..bddda27 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -42,4 +42,4 @@ updates: groups: group-all-github-actions-updates: patterns: - - "*" \ No newline at end of file + - "*"