Roo-Code/.github/dependabot.yml
2024-12-24 20:42:50 -08:00

39 lines
1.2 KiB
YAML

version: 2
updates:
# Main extension dependencies
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
# Group all updates into a single PR
groups:
all-dependencies:
patterns:
- "*"
ignore:
# Ignore all non-security updates (security vulnerabilities bypass these ignore rules)
- dependency-name: "*"
update-types:
- "version-update:semver-major"
- "version-update:semver-minor"
- "version-update:semver-patch"
# Webview UI dependencies
- package-ecosystem: "npm"
directory: "/webview-ui"
schedule:
interval: "weekly"
groups:
all-dependencies:
patterns:
- "*"
ignore:
# Ignore CRA and related packages that often have false positives
- dependency-name: "react-scripts"
- dependency-name: "@testing-library/*"
- dependency-name: "web-vitals"
- dependency-name: "*"
update-types:
- "version-update:semver-major"
- "version-update:semver-minor"
- "version-update:semver-patch"