0
0
mirror of https://github.com/ankidroid/Anki-Android.git synced 2024-09-20 03:52:15 +02:00
Anki-Android/.github/dependabot.yml
Mike Hardy f4172d6514 chore(deps): keep npm dependency updates to one PR if non-breaking
the npm package ecosystem releases all the time and it clutters up the
PR queue for mostly meaningless dependency updates

dependabot has a new "groups" feature to group dependency update PRs
together in to one PR based on either name globs, update types, or
dependency type

this should allow us to get all non-breaking changes through in single
PRs, while breaking (semver-major) changes will get individual PRs for
more detailed consideration

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
2024-01-26 19:11:47 +00:00

33 lines
743 B
YAML

version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
- package-ecosystem: gradle
directory: "/"
schedule:
interval: daily
time: "10:00"
open-pull-requests-limit: 10
target-branch: dependency-updates
labels:
- "dependencies"
ignore:
# Ignore all Rust backend updates, these are always done as manual pulls
- dependency-name: io.github.david-allison-1:anki-android-backend
- package-ecosystem: npm
directory: "/tools/localization"
schedule:
interval: daily
time: "10:00"
open-pull-requests-limit: 10
target-branch: dependency-updates
groups:
non-breaking:
update-types:
- "minor"
- "patch"
labels:
- "dependencies"