From 1bf90efe759f1239002d2c9586532a16612c9d6d Mon Sep 17 00:00:00 2001 From: Xi Xu Date: Fri, 11 Jul 2025 17:46:00 +0800 Subject: [PATCH] Add Dependabot configuration for npm and Actions Introduces .github/dependabot.yml to automate dependency updates for npm packages and GitHub Actions. Sets weekly update schedule, groups related dependencies, and assigns/reviews PRs to xixu-me. --- .github/dependabot.yml | 66 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..7d7f900 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,66 @@ +version: 2 +updates: + # Enable version updates for npm dependencies + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "09:00" + # Keep PRs manageable + open-pull-requests-limit: 5 + # Auto-merge patch and minor updates for dev dependencies + assignees: + - "xixu-me" + reviewers: + - "xixu-me" + commit-message: + prefix: "npm" + include: "scope" + # Group related updates together + groups: + build-tools: + patterns: + - "webpack*" + - "rollup*" + - "vite*" + - "esbuild*" + - "parcel*" + linting-formatting: + patterns: + - "eslint*" + - "prettier*" + - "@typescript-eslint/*" + - "stylelint*" + testing: + patterns: + - "jest*" + - "mocha*" + - "chai*" + - "cypress*" + - "playwright*" + - "@testing-library/*" + types: + patterns: + - "@types/*" + + # Enable version updates for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "09:00" + open-pull-requests-limit: 3 + assignees: + - "xixu-me" + reviewers: + - "xixu-me" + commit-message: + prefix: "actions" + include: "scope" + # Group all GitHub Actions updates together + groups: + github-actions: + patterns: + - "*"