chore: dependabot config

This commit is contained in:
Simon
2026-04-08 17:34:17 +08:00
parent 531b59f538
commit d384967e41

View File

@@ -5,22 +5,25 @@ updates:
schedule: schedule:
interval: 'weekly' interval: 'weekly'
groups: groups:
# 生产依赖 - 小版本更新
production-dependencies: production-dependencies:
dependency-type: 'production' dependency-type: 'production'
update-types: update-types:
- 'minor' - 'minor'
- 'patch' - 'patch'
# 开发依赖 - 小版本更新
development-dependencies: development-dependencies:
dependency-type: 'development' dependency-type: 'development'
update-types: update-types:
- 'minor' - 'minor'
- 'patch' - 'patch'
# Major 更新单独处理(不分组,需要人工审查) development-major:
# 安全更新也不分组Dependabot 会自动优先创建独立 PR dependency-type: 'development'
update-types:
- 'major'
# Production major updates are intentionally ungrouped for individual review.
# Security updates are also ungrouped — Dependabot prioritizes them automatically.
- package-ecosystem: 'github-actions' - package-ecosystem: 'github-actions'
directory: '/' directory: '/'