vt-social/.github/dependabot.yml

85 lines
2.8 KiB
YAML

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
version: 2
updates:
- package-ecosystem: npm
directory: '/'
schedule:
interval: weekly
open-pull-requests-limit: 99
allow:
- dependency-type: direct
ignore:
# This version needs to match Rails major version, so stick to 6.x only
- dependency-name: '@rails/ujs'
versions:
- '7.x'
# TODO: This version got stuck in https://github.com/mastodon/mastodon/pull/14004 and this should be deleted to fix
- dependency-name: 'pg'
versions:
- '8.x'
# TODO: This was ignored in https://github.com/mastodon/mastodon/pull/19120
- dependency-name: 'uuid'
versions:
- '9.x'
# TODO: This version got stuck in https://github.com/mastodon/mastodon/pull/14073 and this should be deleted to fix
- dependency-name: 'history'
versions:
- '5.x'
# TODO: This requires code changes for migration
- dependency-name: 'tesseract.js'
versions:
- '3.x'
- '4.x'
# TODO: This version needs manual updates for breaking changes
- dependency-name: 'react-hotkeys'
versions:
- '2.x'
# TODO: This version got stuck in https://github.com/mastodon/mastodon/pull/15206 and this should be deleted to fix
- dependency-name: 'terser'
versions:
- '5.x'
- package-ecosystem: bundler
directory: '/'
schedule:
interval: weekly
open-pull-requests-limit: 99
allow:
- dependency-type: direct
ignore:
# This version needs to match Rails major version, so stick to 6.x only
- dependency-name: 'rails-i18n'
versions:
- '7.x'
# This version needs manual updates https://github.com/rails/sprockets/blob/master/UPGRADING.md#guide-to-upgrading-from-sprockets-3x-to-4x
- dependency-name: 'sprockets'
versions:
- '4.x'
- package-ecosystem: github-actions
directory: '/'
schedule:
interval: weekly
open-pull-requests-limit: 99
allow:
- dependency-type: direct
- package-ecosystem: docker
directory: '/'
schedule:
interval: weekly
open-pull-requests-limit: 99
ignore:
- dependency-name: 'moritzheiber/ruby-jemalloc'
update-types:
# only suggest patch releases for ruby and needs to sync with .ruby-version
- 'version-update:semver-minor'
- dependency-name: 'node'
update-types:
# only node minor releases allowed unless .nvmrc major is changed
- 'version-update:semver-major'