From 75967b2bf527a8474f3d8add34d3d23974c1ccb5 Mon Sep 17 00:00:00 2001 From: Vojtech Simetka Date: Thu, 21 Apr 2022 19:33:15 +0500 Subject: [PATCH] ci: add dependabot (#335) --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..8e12961 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,13 @@ +# See config in https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates + +version: 2 +updates: + # Enable version updates for npm + - package-ecosystem: 'npm' + # Look for `package.json` and `lock` files in the `root` directory + directory: '/' + # Check the npm registry for updates every day (weekdays) + schedule: + interval: 'weekly' + # Always increase the version in package.json as well (for patch versions by default only package-lock.json i updated) + versioning-strategy: increase