-
Notifications
You must be signed in to change notification settings - Fork 470
/
dependabot.yml
51 lines (44 loc) · 1.47 KB
/
dependabot.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
version: 2
updates:
- package-ecosystem: npm
directory: "/"
schedule:
interval: daily
open-pull-requests-limit: 15
ignore:
# Need manual updates with "resolutions" in package.json
# to property hoist versions from react-scripts
- dependency-name: "webpack"
- dependency-name: "eslint"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
- package-ecosystem: "pip"
directory: "/deployer"
schedule:
interval: "weekly"
- package-ecosystem: "pip"
directory: "/testing/integration"
schedule:
interval: "weekly"
- package-ecosystem: npm
directory: "/deployer/aws-lambda/content-origin-request"
schedule:
interval: daily
open-pull-requests-limit: 10
# This forces the Dependabot commit messages to conform to something
# our auto-merge workflow can always cope with.
# See https://github.com/ahmadnassri/action-dependabot-auto-merge/issues/31#issuecomment-718779806
commit-message:
prefix: build
prefix-development: chore
include: scope
ignore:
# In https://github.com/mdn/yari/issues/3694 we discovered that
# installing puppeteer 9.1.0 seems to have made the tests flaky
# when jest starts up. See the issue for more detail.
# After this, we can keep an eye on puppeteer to see if the tests
# get better later with new versions.
- dependency-name: "puppeteer"
versions: ["9.1.x"]