chore: dependabot config
This commit is contained in:
11
.github/dependabot.yml
vendored
11
.github/dependabot.yml
vendored
@@ -5,22 +5,25 @@ updates:
|
|||||||
schedule:
|
schedule:
|
||||||
interval: 'weekly'
|
interval: 'weekly'
|
||||||
groups:
|
groups:
|
||||||
# 生产依赖 - 小版本更新
|
|
||||||
production-dependencies:
|
production-dependencies:
|
||||||
dependency-type: 'production'
|
dependency-type: 'production'
|
||||||
update-types:
|
update-types:
|
||||||
- 'minor'
|
- 'minor'
|
||||||
- 'patch'
|
- 'patch'
|
||||||
|
|
||||||
# 开发依赖 - 小版本更新
|
|
||||||
development-dependencies:
|
development-dependencies:
|
||||||
dependency-type: 'development'
|
dependency-type: 'development'
|
||||||
update-types:
|
update-types:
|
||||||
- 'minor'
|
- 'minor'
|
||||||
- 'patch'
|
- 'patch'
|
||||||
|
|
||||||
# Major 更新单独处理(不分组,需要人工审查)
|
development-major:
|
||||||
# 安全更新也不分组,Dependabot 会自动优先创建独立 PR
|
dependency-type: 'development'
|
||||||
|
update-types:
|
||||||
|
- 'major'
|
||||||
|
|
||||||
|
# Production major updates are intentionally ungrouped for individual review.
|
||||||
|
# Security updates are also ungrouped — Dependabot prioritizes them automatically.
|
||||||
|
|
||||||
- package-ecosystem: 'github-actions'
|
- package-ecosystem: 'github-actions'
|
||||||
directory: '/'
|
directory: '/'
|
||||||
|
|||||||
Reference in New Issue
Block a user