Skip to content

Keep major updates out of the weekly Dependabot group #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
YauhenBichel merged 2 commits into from
Sep 26, 2026
Merged

Keep major updates out of the weekly Dependabot group #6

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a9b4e1a
Keep major updates out of the weekly Dependabot group
YauhenBichel Sep 26, 2026
3068a05
Merge branch 'main' into chore/dependabot-majors
YauhenBichel Sep 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,23 @@
version: 2
updates:
# Dev tools only: the package has no run-time dependencies besides React,
# which is a peer. Grouped so there is one pull request a week, not ten.
# which is a peer. Minor and patch updates come grouped, once a week.
# Major updates come one pull request each, so each can be judged alone.
- package-ecosystem: npm
directory: /
schedule:
interval: weekly
groups:
dev-tools:
dependency-type: development
update-types: [minor, patch]
ignore:
# Follows the Node version CI and .nvmrc use (22), not the newest Node.
- dependency-name: '@types/node'
update-types: [version-update:semver-major]
# A new TypeScript major waits until typescript-eslint supports it.
- dependency-name: typescript
update-types: [version-update:semver-major]
open-pull-requests-limit: 5

# Actions are pinned by SHA; this keeps the pins current.
Expand Down
Loading