From d384967e41f2d5631627c696559bd063a81dbc5b Mon Sep 17 00:00:00 2001 From: Simon <10131203+gaomeng1900@users.noreply.github.com> Date: Wed, 8 Apr 2026 17:34:17 +0800 Subject: [PATCH] chore: dependabot config --- .github/dependabot.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c57171b..39127d2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,22 +5,25 @@ updates: schedule: interval: 'weekly' groups: - # 生产依赖 - 小版本更新 production-dependencies: dependency-type: 'production' update-types: - 'minor' - 'patch' - # 开发依赖 - 小版本更新 development-dependencies: dependency-type: 'development' update-types: - 'minor' - 'patch' - # Major 更新单独处理(不分组,需要人工审查) - # 安全更新也不分组,Dependabot 会自动优先创建独立 PR + development-major: + dependency-type: 'development' + update-types: + - 'major' + + # Production major updates are intentionally ungrouped for individual review. + # Security updates are also ungrouped — Dependabot prioritizes them automatically. - package-ecosystem: 'github-actions' directory: '/'