Files
OwnCord/.github/dependabot.yml
T
jevb 614e6adfe3 chore: restrict Dependabot to minor/patch bumps only
Major version bumps (vite 6→8, vitest 3→4, actions v4→v6) need
manual review and testing. Adds semver-major ignore rules to all
four ecosystems to prevent noisy PRs.
2026-03-19 18:19:51 +01:00

67 lines
1.5 KiB
YAML

version: 2
updates:
# Go server dependencies
- package-ecosystem: gomod
directory: /Server
schedule:
interval: weekly
day: monday
commit-message:
prefix: "chore(deps):"
labels:
- dependencies
- go
open-pull-requests-limit: 10
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
# Tauri client npm dependencies
- package-ecosystem: npm
directory: /Client/tauri-client
schedule:
interval: weekly
day: monday
commit-message:
prefix: "chore(deps):"
labels:
- dependencies
- npm
open-pull-requests-limit: 10
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
# Tauri Rust/Cargo dependencies
- package-ecosystem: cargo
directory: /Client/tauri-client/src-tauri
schedule:
interval: weekly
day: monday
commit-message:
prefix: "chore(deps):"
labels:
- dependencies
- rust
open-pull-requests-limit: 5
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
# GitHub Actions
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
day: monday
commit-message:
prefix: "ci(deps):"
labels:
- dependencies
- ci
open-pull-requests-limit: 5
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]