diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b2cf544..119333a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,7 +1,8 @@ version: 2 updates: # Dev tools only: the package has no run-time dependencies besides React, - # which is a peer. Grouped so there is one pull request a week, not ten. + # which is a peer. Minor and patch updates come grouped, once a week. + # Major updates come one pull request each, so each can be judged alone. - package-ecosystem: npm directory: / schedule: @@ -9,6 +10,14 @@ updates: groups: dev-tools: dependency-type: development + update-types: [minor, patch] + ignore: + # Follows the Node version CI and .nvmrc use (22), not the newest Node. + - dependency-name: '@types/node' + update-types: [version-update:semver-major] + # A new TypeScript major waits until typescript-eslint supports it. + - dependency-name: typescript + update-types: [version-update:semver-major] open-pull-requests-limit: 5 # Actions are pinned by SHA; this keeps the pins current.