# To get started with Dependabot version updates, you'll need to specify which # package ecosystems to update and where the package manifests are located. # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: # Enable version updates for npm - package-ecosystem: 'npm' directory: '/' schedule: interval: 'weekly' day: 'saturday' time: '09:00' timezone: 'Asia/Shanghai' open-pull-requests-limit: 10 commit-message: prefix: 'chore' prefix-development: 'chore' include: 'scope' labels: - 'dependencies' - 'automated' - 'chore' allow: - dependency-type: 'direct' - dependency-type: 'indirect' ignore: # 忽略主要版本更新,避免破坏性变更 - dependency-name: '*' update-types: ['version-update:semver-major'] groups: # 将所有非重大(minor/patch)更新合并到一个 PR npm-minor-patch: applies-to: version-updates patterns: - '*' update-types: - 'minor' - 'patch' # Enable version updates for Docker - package-ecosystem: 'docker' directory: '/' schedule: interval: 'weekly' day: 'saturday' time: '09:00' timezone: 'Asia/Shanghai' open-pull-requests-limit: 5 reviewers: - 'laoshuikaixue' assignees: - 'laoshuikaixue' commit-message: prefix: 'chore' include: 'scope' labels: - 'dependencies' - 'automated' - 'chore' ignore: - dependency-name: '*node*' groups: docker-all: applies-to: version-updates patterns: - '*' # Enable version updates for GitHub Actions - package-ecosystem: 'github-actions' directory: '/' schedule: interval: 'weekly' day: 'saturday' time: '09:00' timezone: 'Asia/Shanghai' open-pull-requests-limit: 5 commit-message: prefix: 'chore' include: 'scope' labels: - 'dependencies' - 'automated' - 'chore' groups: gha-all: applies-to: version-updates patterns: - '*'