Merge pull request #639 from substantial/dependabot/add-v2-config-file

Upgrade to GitHub-native Dependabot
This commit is contained in:
Aaron Jensen 2021-08-10 10:47:36 -04:00 committed by GitHub
commit fff9abd4a4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

53
.github/dependabot.yml vendored Normal file
View File

@ -0,0 +1,53 @@
version: 2
registries:
npm-registry-registry-npmjs-org:
type: npm-registry
url: https://registry.npmjs.org
token: "${{secrets.NPM_REGISTRY_REGISTRY_NPMJS_ORG_TOKEN}}"
npm-registry-npm-pkg-github-com:
type: npm-registry
url: https://npm.pkg.github.com
token: "${{secrets.NPM_REGISTRY_NPM_PKG_GITHUB_COM_TOKEN}}"
updates:
- package-ecosystem: npm
directory: "/"
schedule:
interval: daily
time: "13:00"
open-pull-requests-limit: 10
ignore:
- dependency-name: gulp
versions:
- "> 3.9.1"
- dependency-name: "@typescript-eslint/eslint-plugin"
versions:
- 4.17.0
- 4.22.0
- dependency-name: typescript
versions:
- 4.1.3
- 4.1.4
- 4.1.5
- 4.2.2
- 4.2.3
- dependency-name: "@babel/plugin-proposal-object-rest-spread"
versions:
- 7.12.13
- 7.13.0
- 7.13.8
- dependency-name: "@babel/core"
versions:
- 7.12.13
- dependency-name: table
versions:
- 6.3.0
- dependency-name: "@typescript-eslint/parser"
versions:
- 4.22.0
- dependency-name: eslint
versions:
- 7.24.0
registries:
- npm-registry-registry-npmjs-org
- npm-registry-npm-pkg-github-com