From 9852781858484ae926f30777a48cc1401be81102 Mon Sep 17 00:00:00 2001 From: Tim Haines Date: Thu, 23 Jul 2026 20:16:20 +1200 Subject: [PATCH] Add npm ecosystem for the local-viewer frontend MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The React/Vite SPA under strix/viewer/frontend is a second package ecosystem (package-lock.json v3) that was going unmonitored. Add it with the same shape as the uv block — ungrouped, capped at 5 PRs/week, 7-day cooldown. No ignores: every dep is a plain caret range with no cap. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ad4aba24d..b15acb4eb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,6 +22,15 @@ updates: - dependency-name: "openai-agents" versions: [">0.14.6"] # exact-pinned during the SDK migration + # Local-viewer SPA — the tree's npm ecosystem. + - package-ecosystem: "npm" + directory: "/strix/viewer/frontend" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + # GitHub Actions in the release workflow — grouped into one weekly PR. - package-ecosystem: "github-actions" directory: "/"